STORAGE VENTURE 
Pillar Data Systems, a start-up with $150M in funding from 
Oracle's Larry Ellison, launches its first disk array. PAGE 16 


TECHNOLOGY FAILURE 
United Air Lines grounds an underperforming 
baggage system at Denver's airport. PAGE 8 
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Users Wary of Federal 
Medical Record Plans 


HHS secretary unveils public-private scheme 
to develop standard de ita-exchange methods 


BY HEATHER HAVENSTEIN 
NEW YORK 
Hoping to overcome one of 
the key obstacles to the cre- 
ation of a national IT system 
for exchanging health 
data, the U.S. Health 
and Human Services 
Department last week 
unveiled a new plan 
for developing data 
standards for electron- 
ic medical records. 
But even though the 
lack of interoperability 
among current IT systems is 
a problem, several users ex- 
pressed doubt that the indus- 
try can come together and 


| tiative. “ 
| jor challenge to come up with 


| upon,” 


ania 


A civil grand jury in 
California charges 
that Santa Clara 
County is failing in 
its effort to build an 
electronic medical 
records system. 


Page 47 


rally around a standards ini- 
It’s going to be a ma- 


something we can all agree 
said Dennis Sato, CIO 
at Salem Hospital in 
Salem, Ore. 

At the Healthcare 
Information Manage- 
ment and Systems So- 
ciety summit here, 
HHS Secretary Mike 
Leavitt said the 
agency plans to work 
with hospitals, physician 
practices, insurance compa- 


| nies and vendors to forge 
| interoperability standards 
Records, page 47 


EGE 2 A pee! 

a Warenaver: 
BCU e Oc 
myc m mule 


achievements on IT 


yA} a ed 
ee ete) 

Pre am A ORE Ld 

also won technology leadership awards. 


Read case studies about the 
winning projects. QuickLink a6120 
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Chief Medical Officer Eure) 
eased BMCS into the Digital Age. 


GENE BEDNAREK/SIL VER IMAGE 


Here's how Baptist 
Medical Center South 
got doctors to buy into 
wireless handhelds and 
fully electronic medical 
records, something 
other hospitals have 
failed to do. By Julia 
King PAGE 35 


THE PAPERLESS HOSPITAL- 


Sarb-Ox Relief ls Too 
Late to Ease IT Pain 


Much of the hardest 
work has already been 
done, tec hexecs say 


| P 
| 
| 
| 
- | 


BY THOMAS HOFFMAN 
Speculation continues to 
abound that the U.S. Securi- 
ties and Exchange Commis- 
sion and the Public Company 
Accounting Oversight Board 
may make further revisions to 
the Sarbanes-Oxley Act to 
help make it easier for com- 


panies to comply with the 
law’s requirements. 
However, any relief that 


| might be offered would fall 
short of stemming the pain 


that many IT departments 


| have had to endure to 


document their tech- 
nology controls, IT 
managers and analysts 
said last week. 

For example, Joseph 
Antonellis, CIO at State 
Street Corp. in Boston, 


Nh 


| said the time, costs and di- 
verted resources needed to 
comply with Sarbanes-Oxley 
“create an obstacle for our or- 
ganization” that has made it 
harder for the IT department 
to meet end-user needs. 

The law has forced State 
Street to conduct “ 
amount of documentation 
and testing to validate what 

| we already knew — that the 

existing IT control in- 

frastructure and corpo- 
rate audit activities 

we've had in place for a 

long time at State Street 

are in full compliance 
with Sarbanes-Oxley,” 
Sarb-Ox, page 16 
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YOU 

VS 
PRECARIOUS 
GROWTH 


; IBM MIDDLEWARE HELPS YOU ALIGN YOUR IT WITH BUSINESS GOALS TO DRIVE GROWTH. Finally, there's an integrated 

Mc ue approach to application development, deployment and management. Now you can leverage the combined power and breadth of 

IBM Rational and Tivoli® to far exceed the limited testing and mere monitoring that others offer. Market-leading middleware, like IBM Rational Portfolio Manager 

and the newly integrated IBM Rational Performance Tester and Tivoli Monitoring for Transaction Performance, helps you manage every aspect of the IT lifecycle 
Go beyond efficiencies. Innovate. Drive business growth 


VISIT IBM.COM/MIDDLEWARE/LIFECYCLE 
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IBM WebSphere middleware is the easy, affordable way to integrate a multitude of applications. In fact, you can CONNECT ANY 
APPLICATION ON ANY PLATFORM WITH OPEN STANDARDS-BASED IBM MIDDLEWARE. Only IBM has years of proven, 
} customers build composite applications. The open standards answer to complex application, platform and IT infrastructure 





combinations. IBM WebSphere lets you re-use your existing IT investments. Imagine increasing efficiencies and making your business more flexible. 


SEE HOW AT IBM.COM/MIDDLEWARE/CONNECT 
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YOU 
VS 
FRAYED CONTENT, 

FRAYED SOLUTIONS, . , 
AND VERY 
FRAYED NERVES 


Digital audio. Video. Records. Documents. Whatever form your information takes, IBM HAS AN INFORMATION MANAGEMENT 
SOLUTION THAT CAN BE TAILORED SPECIFICALLY FOR YOU. Based on open standards, IBM Content Management 


middleware, part of the IBM Information Management family, allows content to work together seamlessly, so employees can quickly get the right inform at 
the right time. Affordable to acquire and to manage, its modular construction means a solution that can grow easily with your business. Discover what else IBM Content 
Management can do for you. 


VISIT IBM.COM/MIDDLEWARE/CONTENT 
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| ital IBM Tivoli IT Service Management can streamline your IT operations. It's THE MOST COMPLETE END-TO-END MIDDLEWARE SOLUTION THAT 
@ DELIVERS TIGHT INTEGRATION between technology, processes and people, while boosting the availability and efficiency of your IT services. Its automation 
tools can help minimize time and labor costs, while modular construction means it’s a solution that can grow easily with your business 


DISCOVER A BETTER WAY TO MANAGE THE BUSINESS OF IT AT IBM.COM/MIDDLEWARE/MGMT 
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Anticipation Game 

In the Technology section: Sales of 
predictive analytics systems are 
booming as text mining and real- 
time applications make them more 
valuable to business. Page 21 


ONLINE 


CONTENTS 


Get Ready: The Rules Are Changing 


In the Management section: When business 
processes become commodities, all the rules 
change, says Babson College researcher 
Thomas Davenport. Here’s what CIOs need 
to do about it. Page 38 








: TECHNOLOGY  —: OPINIONS 


28 Security Manager’s Journal. 6 On the Mark: Mark Hall re- 





NT em LY 
award winners in 
this year’s Com- 
2005 a en 
ors Program use 
IT to make a real difference in peo- 
ple’s lives. Those who see comput- 
ers as nothing more than hard- 
Meee aeo re lecMul (li aor Ut 
their minds after reading how 
technology makes it possible to 
mutter eer ewe el 
Cee ee mh) 
iPS Cima ee 


United Air Lines gives up ona 
computerized baggage system 


Microsoft challenges the 
BlackBerry’s dominance in 
the mobile e-mail market. 


Apple’s move to Intel chips 
tests the faith of Mac devotees. 


NIST guidelines aim to help 
federal agencies assess com- 


POPP eer eases eeeeserereeeseesess 


Lull in Action Is Time to Tie 
Up Loose Ends. The blackout 
at the end of the quarter gives 
Mathias Thurman a chance to 
do some documentation and 
evaluate new technologies. It 
also gives him time to consid- 
er how the company’s growth 
has affected his staff. 


30 Q&A: Beyond Paper. Hervé 


Gallaire, president of the 
Xerox Innovation Group, dis- 
cusses real-world applications 
of research and development 
and how the company plans to 
exploit innovation. 


MANAGEMENT — 


at Denver International Airport. : 


35 The Paperless Hospital - 


Really! For a brand-new hos- 
pital whose staff has just a few 
weeks of experience working 
in a totally electronic environ- 
ment, the overall atmosphere 
at Baptist Medical Center 
South is strikingly tranquil. 


: 40 IT Mentor: Alignment: What 


pliance with pending informa- : 


tion-security rules. 


Global Dispatches: London 
police arrest a systems admin- 
istrator suspected of hacking 
U.S. government computers. 


Unisys adds capacity-on- 
demand capabilities to its 
Intel-based ES7000 servers. 


Larry Ellison’s storage start- 
up introduces low-cost arrays 
with SAN and NAS manage- 
ment capabilities. 


it Really Means. 
Troy D. Kinsey 
(left) explains how 
to tell if business 
and IT are aligned 
and what to do if 
they’re not. 


: 42 Career Watch. There’s a new 


title in corporate IT: senior 
vice president of data man- 
agement. Plus, Silicon Valley’s 
top executives are still getting 
huge pay increases, and we 
examine the behavioral differ- 
ences between CIOs and 
CEOs. 


ports that a new offering from 
Wyse Technology could elimi- 
nate the need for pricey flash 
memory in devices at the edge 
of the network. 


Don Tennant is troubled by 
the news that some IT organi- 
zations may be de-emphasiz- 
ing technical certifications. 


Michael H. Hugos sees IT and 
its reputation standing at a 
crossroads. Which way they 
go depends on how practi- 
tioners respond to complexity. 


Dan Gillmor welcomes Con- 
gress’ efforts to curb spyware, 
but he suspects that laws can’t 
do nearly enough. 


: 32 Curt A. Monash believes 


that without application 
development tools, analytic 
technologies can’t reach their 
full potential. 


: 43 Bart Perkins warns that if 


your IT priorities aren’t based 
on business cases, you’re 
shooting in the dark. 


: 48 Frankly Speaking: Frank 


Hayes knows we'll hear howls 
from users when hard disk 
drives that automatically en- 
crypt data arrive, but IT needs 
such devices. 


DEPARTMENTS/RESOURCES 


At Deadline Briefs 
News Briefs 
Letters 

IT Careers 


: Company Index 


How to Contact CW 
Shark Tank 


View From Offshore: The End of 
Call Center 


OUTSOURCING: Richard Mills of Chalre Asso- 
ciates reviews the offshore call center scene. 


© Quicklink 54792 


Apple’s Move to Intel Prompts 
ALook Back, and a Look Ahead 
MACINTOSH: This is not the first time Apple 
has tackled Mac-on-Intel hardware, says 
columnist Ryan Faas. But it’s the first time 
it has been done in a way that could prove 
truly successful. @ QuickLink a6100 


SECURITY: Developers should heed the writ- 
ings of a 19th century cryptographer, who 
could teach them a thing or two about de- 
signing security into their products, says 
columnist Jian Zhen. @ QuickLink 54856 


‘Grid’ Storage Is in the Eye of 

The Beholder (and Vendor) 
STORAGE: Clustered and virtualized capabili- 
ties are also touted as gridlike, as Robert L. 
Scheier explains in this article from Storage 
Networking World Online. @ QuickLink a6110 


Why Standards Are Important 
For Wireless Security 
MOBILE/WIRELESS: Airespace’s Bob O’Hara 
explains how standards groups and compa- 
nies work together to foster secure wireless 


networking. © QuickLink 54938 
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accepted an award.for the Broward County Environmental 
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IT Achievers 


Get Recognition, 
Give Others Ideas 


‘Ten organ 


izations win 


awards for visionary tech 
projects; Szygenda, Szulik 
receive individual awards 


Honorees 


The 10 winners 
of the 21st Century 
Achievement Awards 
for 2005 include the 
following companies 


and organizations: 


@eeeeeeoeooeoseeoseecoeeceeoeoeaoeeeaeee eee eeeeeseeeeeeaeeseeaeeeeeeeeeeeeeaeeeeaeeseeeeeeeeeaeeeoee ee eeee eect 


Government 

and Nonprofit 
Organizations 
Aidmatrix: The Dallas-based not- 
for-profit organization offers a supply 
chain system that lets humanitarian aid 
groups adopt inventory management 
and distribution techniques previously 
used almost exclusively by for-profit 
companies. 


BY PATRICK THIBODEAU 
WASHINGTON 


NEWS SPECIAL REPORT 


| nology to create an online sys- 


HEN A GROUP of 
in an attempt to improve the 


IT leaders from 

Acxiom Corp. 

approached the 
stage last week to receive a 
Computerworld Honors award 
for their grid computing proj- 
ect, among those paying close 
attention was Clyde Smith, a 
top IT executive at Turner 
Broadcasting System Inc. 

Smith, whose own efforts to 
improve the storage and man- 
agement of digital media at 
Atlanta-based TBS were also 
honored at the 2005 awards 
ceremony here, said he’s very 
interested in grid computing 
as a potential means of apply- 
ing more processing power to 
his newsroom systems. 

Taking note of Little Rock, 
Ark.-based Acxiom’s effort 
to link thousands of two-proc- 
essor computing nodes into a 
grid, Smith said with a grin: 
“We're going to pay a visit.” 

The Computerworld Honors 
Program recognizes compa- 
nies, nonprofit organizations 
and government agencies 
from around the world for 
their visionary use of IT to 
promote social, economic and 
educationa! advancements. 
Their work is detailed in case 
studies that are archived on- 
line and distributed to some 
120 museums and libraries for 
use by scholars, researchers 
and the general public. 

But the IT projects recog- 
nized at the awards ceremony 
are viewed as models of the 
future, not icons of the past. 

For instance, Aidmatrix, 
which won the achievement 
award in the Government and 
Nonprofit Organizations cate- 
gory, used supply chain tech- 


Education | 

and Academia 
Australian Department of 
Defence: Australia’s Defence 

Online Campus has developed a highly 
flexible learning infrastructure built 
around a common architecture and 
uniform basic standards. 


tem that matches corporate 
donors with charitable groups 


| dalioeey of food, clothing and 
| other aid items. 


| Reducing Waste 
The Aidmatrix Relief Ex- 
| change system allows partici- 
pants “to see donations being 
made available” in real time, 
said Scott McCallum, a former 
Wisconsin governor who now 
heads the Dallas-based global 
relief network. The main goal 
is to manage donations and in- 
ventories of available goods in 
order to provide aid more effi- 
ciently and prevent donated 
materials from going to waste. 
“For a marketplace to work, 


is responsible for 
delivering medical care 
PMc cele erM M ule ecm ir U) 
71,000 square miles in Al- 
berta, Canada. Geographi- 
cally, Northern Lights is the 
province’s largest health 
care jurisdiction. But the 
area the agency covers in 
northern Alberta is sparsely 


¢ 


one 


Media, Arts and 
Entertainment 

Turner Broadcasting System 
Inc.: A digital media storage and 
management optimization project at 
Atlanta-based TBS addresses one of 
the central issues facing broadcasters 
and cable networks: the end of the 
mass viewing market. 


COLLIN JARDINE, NORTHERN LIGHTS 


www.computerworld.com 





| you need information,” Mc- 


Callum said, adding that the 


| technology used by Aidmatri 


“provides the information sys- 
tem to take what would be 
wasted and match it with 
those that are in need.” He ex- 
pects the Aidmatrix model to 
be adopted by others within 
the relief community. 

Smith, who is senior vice 
president for broadcast engi- 
neering at TBS, has been a 
regular attendee of the Honors 
Program ceremonies and said 
he routinely finds technology 
approaches that are worth em- 
ulating. “Every year, I pick up 
two or three great ideas from 
these extremely brilliant peo- 
ple who have innovative prob- 
lem-solving skills,” he said. 


MELO me TUE MCGEE 
only about 70,000 people. 

a COMiomCeee Te 
mission, Northern Lights is 
using IBM xSeries servers 
and networking technology 
from Cisco Systems Inc. that 
enables patients and physi- 
cians to interact over a con- 
verged IP network support- 
ing data, voice and video 
communications. Northern 


Business and 
Related Services 
Acxiom Corp.: The Little Rock, 
Ark.-based company’s grid computing 
architecture is designed to meet the in- 
creasing information management and 
time-to-market needs of both Acxiom 
and its clients. 
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This year’s group of hon- 
orees included Collin Jardine, 
manager of computer services 
at Northern Lights Health Re- 


Lights is also working to 
deploy a wireless network 
to improve the mobility of 
TOM ier mera ae 
said Collin Jardine, the 
agency’s manager of com- 
Claeys se 

“It’s changing the way we 
elem (oli MM Las ate mecrt( 
after accepting the achieve- 
ment award in the Medicine 
category at last week’s Com- 
a ea ee eet el 
PVE Lt 

Mee eMm I MILO) CUR UT 
the network allows a radiolo- 
SM TOMES MMi ect 
MT HL CN MIA M rete Cl 
TORU AU ecm MULL Cs 
in real time. Blood pressure 
and other vital signs are 
also available, and the health 
services supported by the 
MAMA alec TOM er Ut cr 
to include real-time viewing 


Environment, Energy 
and Agriculture 
Broward County Environmental 
Protection Department: The 
Florida county replaced a paper-based 
inspection process with a system that 
lets its workers automatically schedule 
inspections and submit reports to 

a database that’s populated in near 

real time. 





| gion, which provides medical 


services to the residents of 
northern Alberta in Canada. 
People who see IT as little 


on a screen might have had a 
hard time maintaining that 
view after watching Jardine 
accept an achievement award 
for Northern Lights. 

The agency is using tele- 
medicine systems and a con- 
verged IP network to help de- 
liver care to a widely dispersed 
population “that otherwise 


to keep his composure as he 
talked about what the technol- 
ogy has meant to Northern 
Lights (see sidebar below). 
Another company honored 


ATER TL om 

“You can see the patient, 
you can see the pain, you can 
see his symptoms,” Jardine 
said. “It’s the equivalent of 
TTT Uc a 

Northern Lights, which is 
ERM Met amu e am ele 
gan developing telemedicine 
systems in 1999 and started 
TESTO UMMC t Omang 
ETS are 

The technical challenges 
AP meme emi Tel 
network latency and ensuring 
quality-of-service capabilities 
mus) eet em Ce US 
sions. Those problems were 
resolved primarily by stan- 
dardizing Northern Lights’ 
networking technology, Jar- 
Werte 

Details about the project’s 
cost weren't available. 

ea ee 


Finance, Insurance 
and Real Estate 

Sprint Corp.: Sprint's nationwide, 
all-digital wireless network and middle- 
ware extends insurance claim applica- 
tions to mobile devices, enabling faster 
processing of claims. 





| last week was OnStar Corp., a 
| unit of General Motors Corp. 
| that provides a communica- 
| tions service that motorists 
more than hardware and digits | 


can use to seek assistance af- 

ter an accident or when they 

encounter other problems. 
“We know it’s had a mean- 


| ingful impact already in terms 


of not only saved lives, but in 
many thousands of cases [of 


| reduced] injuries,” OnStar 
| President Chet Huber said, 
| noting that the system can 
| help speed emergency re- 

might go without,” said Jardine, | 
who had to pause several times | 


sponses to auto accidents. 
The award winners were 


| chosen by an independent 
| panel of judges from among 
| 48 finalists, including nomi- 


nees from 10 countries. Two 


| individuai awards were also 


BY PATRICK THIBODEAU 
WASHINGTON 


GENERAL MOTORS CORP. 
ClO Ralph Szygenda spoke 
with Computerworld about IT 
issues at last week’s awards 
ceremony, where he won an 
individual award for informa- 
tion leadership. (The interview 
was conducted before GM 
said it plans to lay off 25,000 
of its manufacturing workers.) 
Excerpts follow: 





presented, including one given | 


| to Ralph Szygenda, GM’s CIO. 


In an interview after the 


| ceremony, which drew about 
| 250 attendees, Szygenda said 


he thinks IT is becoming more 


crucial to companies such as 

| GM. For example, he said the 

| automaker is using technology 
| to increase its globalization 


capabilities and reduce the 
time it takes to design vehicles 


(see Q&A, at right). 


Acxiom’s grid computing 


| work provided further evi- 
| dence of the constant changes 
| taking place within IT depart- 


ments. The grid has doubled 
in size over the past year to a 


| total of 6,000 nodes, and it 
| provides the company with 


“on-demand business scalabil- 
ity,” said Chuck Howland, 
Acxiom’s grid infrastructure 
group leader. 

Howland added that by 
using a grid, Acxiom can har- 
ness the computing capability 
it needs to run virtually any 


process. @ 54951 


Science 

European Southern Observatory: 
The ESO's end-to-end data-flow system 
is designed to improve the transmission 
and management of astronomical data 
over transcontinental distances. 


Transportation 

OnStar Corp.: Detroit-based On- 
Star's Advanced Automatic Crash Noti- 
fication system alerts specially trained 


matters? |T matters a 

lot. There are certain 

areas of the business, 

like ERP systems, that 

will become commodi- 

ties. | think that's the 

point he was trying to make. 
He overstated it, though. In 
fact, [IT] will be bigger than 
ever. Having premium prod- 
ucts at the lowest price - kind 
of the Wal-Mart model - that’s 
one [trend] driving the indus- 
try. The other one is globaliza- 
tion. Given those two things, 
companies are going to redo 
all their processes again, and 
| guarantee you, at that point, 
IT is not dead. 


How do you ensure that IT 
is aligned with the business 
at GM? IT people have to be 
business people to start with. 
There is no chance of just be- 
ing a technologist anymore. In 
what | call precision informa- 


SSSSOHOHSSSHSSSSHESSESSESHEEHSHESESESESEEEE 


emergency call center workers to auto 
accidents and relays crash severity data 
and metrics 


Medicine 

Northern Lights Health Region: 
The Canadian health care provider is 
using a converged IP communications 
infrastructure to deliver better diagnos- 
tics and patient treatment and roll out 
new services while controlling costs 


IT ls Getting More Important 
Than Ever, Szygenda Says 


tion technology, every dollar 
that you invest in information 
technology better deliver busi- 
ness results or you are not go- 
ing to succeed. To do that, you 
have to understand the busi- 
ness as well. 

At General Motors, if you 
look at all the people who work 
for me, they are great business 
leaders and great technolo- 
gists. In the future, [they're] 
going to be [the] only sur- 

vivors, and that's going 
to be hard for a lot of 
people because they 
didn’t have both of 
those capabilities. 


Your outsourcing 
deal with EDS is 
ending, and you said 
you're bidding out 
more than $15 billion 
worth of IT business over 
the next five years. What 
are you looking for from the 
bidders? They have [to have] 
the competency to help tra:s- 
form General Motors and to 
work as a team member with 
other information technology 
companies. It isn't lowest 
price. You've got to realize that 
information technology is a 
catalyst for change at General 
Motors. The whole end goal is 
to build the greatest cars and 
trucks, not to build great IT. It's 
just an enabler. @ 54939 
READ MORE ONLINE 
An extended version of this interview 
can be found on our Web site: 
© QuickLink 54890 


Manufacturing 
Cambium-Forstbetriebe: The 
German forestry company uses a 
log-tracking system built around radio 
frequency identification tags and 
database software to document all 

of its labor and transportation 
processes. 





COMPUTERWORLD June 13, 2005 





aU 


Nortel COO Quits 
After Tiff With CEO 


Gary Daichendt has resigned as 
president and chief operating offi- 
cer of Nortel Networks Corp. after 
a falling out with CEO Bill Owens. 
Chief Technology Officer Gary Ku- 
nis will also leave. Owens said 
Daichendt made a major contribu- 
tion to Nortel's business, but “it 
has become apparent to Gary and 
me that we have divergent man- 
agement styles.” 


Intel Raises Q2 
Revenue Forecast 


Intel Corp. said revenue for its 
current fiscal quarter may be 
slightly higher than expected due 
in part to a strong demand for 
laptop computers. The chip maker 
said that it now expects sales to 
be as high as $9.3 billion for the 
second quarter, up from the previ- 
ously projected ceiling of $9.2 bil- 
lion. “The real story is that the 
strength is in mobile,” said Chief 
Financial Officer Andy Bryant. 


Supreme Court 
Rejects Lexmark 


Printer vendor Lexmark Interna- 
tional Inc. has apparently failed in 
a legal battle to use the Digital 
Millennium Copyright Act to stop 
competitors from making cheaper, 
refurbished toner cartridges that 
can be used in its printers. The 
U.S. Supreme Court rejected Lex- 
mark’s claim, just as lower courts 
had done previously. The court 
rejected the claim without com- 
ment because it was filed late. 


BEA Adds Tools to 
Build, Manage SOAs 


BEA Systems Inc. has unveiled a 
product line designed to provide 
service infrastructures for enter- 
prises to build and manage ser- 
vice-oriented architectures. The 
AquaLogic family, which includes 
rebranded and new tools, will pro- 
vide messaging, Web services 

to support SOA implementations. 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY BUZZ BY MARK HALL 


. ..inascheme to lower costs and increase functional- 
ity of network-edge devices. That’s part of CEO John 
Kish’s vision to revive the fortunes of Wyse Technol- 
ogy Inc. in San Jose. He arrived seven months ago 
and replaced nine of 12 top executives and shifted 


the 20-year-old firm 
from its hardware 

bias into thinking it’s 

a software company. 

Oh, sure, Wyse con- 
tinues to make thin- 
client machines, but 
most of its research 

and development is 
dedicated to making 
devices on the edge of 
the network — handhelds, 
cell phones and even kiosks 
— multifunction, on-demand 
devices. Kish, who holds a 
doctorate in mathematics, 
calculates that by combining 
Wyse’s Blazer operating sys- 
tem for thin clients and Rap- 
port, its software manage- 
ment tool, you can deploy 
low-cost, flash-free devices 
throughout the enterprise 

or for consumers. By stream- 
ing Rapport over the net- 
work to a device, it can load 
Blazer — which boots a unit 
in 3 seconds — along with an 
application after a device is 
turned on, eliminating the 
need to load software from 
wallet-whacking flash memo- 
ry. Technicians in the field 
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could use a single 
handheld to collect 
data and then quickly 
reload it with another 
application to do 
analysis; consumers 
could use their cell 
phones for chatting 
one minute and play- 
ing games the next. 
Kish estimates that 
by eliminating flash memory, 
device costs could tumble 

as much as 40%. Look for 
flashy flashless devices early 
next year. 


Developers can 

make do without. . . 

. .. Make, the software utility 
that builds a program from mul- 
tiple component files. Tracy 
Ragan, CEO of Catalyst Sys- 
tems Corp. in Glencoe, Iil., 
claims that “Make, in general, 
is antiquated.” She says devel- 
opers should dump their 
creaky Make tool and adopt 
Openmake, which on July 15 
will be upgraded to Version 
6.4. The new release will add 
a real-time build manager 
that lets you watch the soft- 





ware build as it happens. If 
you notice a problem during 
the process, you can fix the 
errant source code while 
Openmake continues to run 
the rest of the build, and 
then reload the revised file, 
which Openmake will handle 
to complete the process. 
Ragan says this is a boon to 
folks engaged in extreme 
programming. 

If Openmake doesn’t strike 
your fancy, Ragan generously 
points you to her competi- 
tors. “We love the competi- 
tion,” she says. Next month, 
one alternative, the first re- 
lease of PerfectBuild from 
Codefast Inc. in San Jose, is 
due. Like Openmake, Perfect- 
Build eliminates the need for 
developers to write scripts to 
link a program’s many files 
together during a build by 
generating the scripts auto- 
matically, says Jon Gettinger, 
vice president of marketing. 
“The more complex a devel- 
opment project becomes, the 
more you need automation to 
reduce build failures,” he says. 

Openmake 6.4 sells for 
$300 per seat plus $4,000 for 
server software. PerfectBuild 
costs $1,000 per seat. 


Cookie cutters skew . . . 
. . - Web site traffic data. Web- 
Trends Inc., a Web analytics 
firm in Portland, Ore., pored 
over 16 months of its cus- 
tomers’ Web traffic — more 
than 5 billion sessions — 

and concluded that 12% of 
Web site visitors set their 
browsers to reject third-party 
cookies. And some new anti- 
spyware tools also eliminate 
third-party cookies from a 
browser. The problem for 
most Web-traffic analytic 
tools, says Jeff Seacrist, direc- 
tor of product marketing, is 
that their analytic prowess is 
largely dependent on cookies 
that browsers see as being 
from third parties. Thus, he 
says, Web traffic data on 
your site might be inaccurate. 
Seacrist claims that Web- 





Web site visitors 
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third-party cookies. 


Trends can use its customers’ 
first-party cookies — those 
that users navigate to — for 
analytical purposes. This 
week, WebTrends is upgrad- 
ing its eponymous analytical 
tool. Version 7.5 adds quick- 
query functions to drill deep 
into data with an easier user 
interface, Seacrist says. A 
hosted version for the enter- 
prise starts at $1,000 per 
month; the licensed software 
approach starts at $10,000. 


Online presentations 

on the fly... 

. » and on-demand and in multi- 
media is the promise from 
Clearengine Corp. in Calgary, 
Alberta. According to CEO 
Paul Bzeta, low-tech end 
users, such as sales staff, 
human resource managers 
and even CEOs, can easily 
upload PowerPoint slides, 
photos and movies and use 
the phone to call the Clear- 
engine-hosted application to 
add voice- 

over com- 

mentary 

that’s syn- 

chronized to itd 

the presenta- 

tion. Unlike 

conferencing N 

tools from 
companies 
such as Web- 
Ex Commu- 
nications Inc., Clearengine 
doesn’t require a presenter to 
be “live” during a viewing. 
End users can see a show 
anytime by clicking on a URL 
sent via e-mail. Currently, 
Clearengine works only with 
Internet Explorer, says Bzeta. 
Firefox is on the development 
schedule, though he declined 
to give a delivery date. Pric- 
ing starts at $899 for an en- 
terprise and is based on the 
number of minutes of storage. 
@ 54919 
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Our color printers, multifunction systems, and digital 
presses are as varied as the business spectrum itself. 
So one is sure to fit your business like a glove. 
Xerox Color. It makes business sense. 


Color is improving work everywhere. And Xerox is making 
integrating digital color into your work environment easier 
than ever. Our systems are easy to install, configure and 
manage. And every one of our award-winning digital color 
devices is compatible with all standard operating systems 
and graphic standards. We offer a wide range of speeds 


with incredible quality and reliability. Our machines are 
self-diagnostic so potential problems can be prevented before 
they occur. But if you do need service, our team is second to 
none. Truth is, we’re cost efficient up and down the line, from 
products, to supplies, to service. Why not try Xerox color on for 
size? You’|l find it works hand in glove with your business. 


Xerox color printers 


multifunction systems 
& digital presses 


xerox.com/color 
1-800-ASK-XEROX ext. COLOR 


XEROX 


Consulting Services 


Technology | Document Management 


© 2005 XEROX CORPORATION. All rights reserved. XEROX® and Xerox Color. It makes business sense are trademarks of XEROX CORPORATION in the United States and/or other countries. 
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United to Scrap Baggage 
System at Denver Airport 


After 10 years, 
technology still 
doesn’t work right 


BY TODD R. WEISS 
FTER MORE THAN a 
decade of trying to 
make Denver Inter- 
national Airport’s 

computerized baggage system 

work as designed, United Air 

Lines Inc. is giving up on the 

technology and returning to 

manual handling procedures. 
“It’s never worked up to its 
potential,” United spokesman 

Jeff Green said last week. He 

added that the airline has 

spent “enormous amounts of 
money” on the system over 
the past 10 years, but it’s still 
used only for luggage heading 
out of Denver on United and 
some baggage transfers be- 
tween flights. The system has 
never been able to process 





luggage from arriving flights. 

That’s a far cry from the 
promise of the system, which 
was designed to use about 300 
PCs and thousands of remote- 
controlled carts operating on 
a 21-mile-long track system 
The carts carry luggage from 
check-in counters to sorting 
areas and then to planes wait- 
ing at airport gates. 

However, problems quickly 
cropped up, delaying the 
opening of Denver Interna- 
tional by 16 months and forc- 
ing the airport to install a con- 
ventional baggage system as 
well. United, which is the pri- 
mary carrier at the airport, 
took over as the project man- 
ager for the automated system 
in October 1994 in an attempt 
to resolve the problems. 

Green said United has been 
considering the move away 
from the computerized system 
for months. The Chicago- 


| 


based airline expects to stop 
using it for outbound bags 
sometime after Labor Day. 

United has been in bank- 
ruptcy since late 2002, and 
one reason for the change is to 
save $1 million a month in sys- 
tem maintenance costs, ac- 
cording to Green. But more 
important, the airline expects 
to drastically reduce its costs 
for misdirected and damaged 
bags caused by the computer- 
ized system, he said. 

Chuck Cannon, a spokes- 
man for Denver International, 
said the original plan was for 
the automated system to han- 
dle luggage for all the airlines 
operating at the airport. “It 
just did not work,” he said, 
adding that the system now is 
starting to require more main- 
tenance because of its age. 

The computerized system 
has cost the airport about 
$230 million to design and 
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UNITED estimates it will save $1 million a month in maintenance costs & 
by scrapping the computerized baggage system at Denver International. § 


install, according to Cannon. 
The conventional baggage sys- 
tem that had to be brought in 
added another $70 million to 
the tab, and the delays in 
opening the airport resulted in 
interest costs of $340 million. 
The system was designed by 
BAE Automated Systems Inc., 
a Carrollton, Texas-based 
company that was acquired by 
G&T Conveyor Co. in Tavares, 
Fla., two years ago. A G&T 
spokesman declined to com- 
ment on the matter last week. 
Bruce Webster, a Washing- 





ton-based consultant who 
counsels companies on trou- 
bled IT projects, said United’s 
decision to stop using the 
system came years too late. 
“There are a few lessons 
that large companies just don’t 
seem to learn,” Webster said. 
“The first lesson is that the 
best way to build a large, com- 
plex system is to evolve it 
from a small system that 
works. No one bothered to get 
a small system up and running 
in the first place — they went 
for the big bang.” @ 54960 





Microsoft Targets BlackBerry 
Users With Mobile Updates 


| tion of Butch Chatham, a prin- 


BY CAROL SLIWA 
ORLANDO 
Planned updates to Exchange 
Server 2003 and Windows 
Mobile 5.0 that Microsoft 
Corp. unveiled at its TechEd 
2005 conference last week 
gave some corporate users 
cause to reconsider their 
BlackBerry infrastructures. 

The updates, due this fall, 
will let systems administrators 
treat Windows-based mobile 
devices just as they would PCs 
and laptops. Exchange Server 
will be able to push e-mail, 
calendars and contact lists to 
mobile clients without help 
from middleware, which Mi- 
crosoft claimed as an advan- 
tage over Research In Motion 
Ltd.’s popular BlackBerry 
wireless devices. 

Built-in functionality to syn- 
chronize Exchange with mo- 
bile devices caught the atten- 


cipal systems administration 
analyst at Smithfield Foods 
Inc. The Smithfield, Va.-based 
pork processor currently uses 





RIM’s BlackBerry Enterprise 
Server to deliver e-mail to 
hundreds of mobile users. 
Chatham said he will look 
into the possibility of getting 
rid of the BlackBerry technol- 
ogy to help Smithfield reduce 
costs, benefit from more tight- 
ly integrated systems and pro- 
vide better security through 
new capabilities that will 
let administrators remotely 
“wipe” information from lost 
or stolen devices. 
“BlackBerry has some of 
these features,” Chatham said. 
“But to be able to bring that 
onto Exchange Server and 
not have to manage multiple 
servers is an opportunity for 
consolidation.” 


Rob Enderle, principal ana- 
lyst at Enderle Group in San 
Jose, said the updates are “Mi- 
crosoft’s biggest effort to turn 
its mobile client into a true 
RIM alternative.” He added 
that in the near term, the odds 
are slim that many BlackBerry 
users will switch. But in the 
longer term, Enderle said, 
companies will likely weigh 
their alternatives — especially 
as they extend mobile capabil- 
ities to more employees and as 
Windows-based handhelds 
that are “as easy to use as 
BlackBerry” hit the market. 

“We're so invested in Black- 
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BUTCH CHATHAM, PRINCIPAL 
SYSTEMS ADMINISTRATION 
ANALYST, SMITHFIELD FOODS 





Berry, we're not going any- 
where,” said Don Browning, a 
solution architect and manag- 
er in the development group 
at a broadcasting company 
that he declined to name. The 
company delivers e-mail to at 
least 1,000 BlackBerry users 
and just purchased 300 new 
devices, he said. Describing 


himself as “a complete addict,” 


Browning added that his Black- 
Berry is the perfect size, unlike 
the Windows-based Pocket PC. 
Ross McKenzie, director of 
information systems at Johns 
Hopkins University’s Bloom- 
berg School of Public Heath, 


DON BROWNING, 
SOLUTION ARCHITECT 
AND MANAGER 





said he would like to be able 
to reset devices or cancel ser- 
vice to lost or stolen hand- 
helds, which Microsoft will 
support in its updates. But the 
Baltimore-based institution 
won't force its 40 BlackBerry 
users to switch, McKenzie 
said, adding that he expects to 
support both BlackBerry and 
Windows-based devices. 

John Starkweather, a senior 
product manager at Microsoft, 
acknowledged that most of the 
company’s upcoming capabili- 
ties are already available from 
RIM, Good Technology Inc. 
and other vendors, which also 
offer options for connecting 
to rival mail servers such as 
Notes. But their approaches 
are “cost-prohibitive for most 
businesses,” he claimed. 


@ 54962 


Microsoft's other TechEd announcements 
included — finally - a ship date for SQL 
Server 2005, in November: 
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New computers can help your people work better. 
(And, work in more places.) 
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The Mobile Solutions You Need When You Need Them. 

Adding mobility means upgrading your productivity. At CDW, we have the top-name mobility solutions to do 

just that. Our account managers. provide fast answers to your product questions, And with access to the largest 

in-stock inventories, you'll get what you need when you need it. So why wait? Get new mobility solutions 

today and start benefiting tomorrow. The Right Technology. Right Away. 


CDW.com * 800.399.4CDW 
In Canada, call 800.387.2173 « CDW.ca 





NO MATTER HOW YOU STACK IT, 
CHECKFREE FOUND WINDOWS DELIVERS 
24% LOWER TCO THAN RED HAT LINUX. 





“We conducted stringent testing and chose 
the Microsoft® solution for its unified stack, 
which saves time and money on integration 
and maintenance. These factors combined 
to give the Microsoft stack a 24 percent 
lower total cost of ownership compared 
to other solutions.” 


— Randy McCoy, CTO, 
CheckFree Corporation 


CheckFree Corporation powers millions of financial transactions daily for 
thousands of financial institutions. As home to one of the world’s largest 
databases, they needed to reduce their cost per transaction while maintaining 
performance and quality. So they conducted a stringent benchmark test of 
an IBM solution stack including Red Hat Linux 9, IBM DB2, and J2EE against 
a Microsoft solution featuring Windows Server™ 2003, SQL Server™ 2000, 
and the .NET Framework. Because the Microsoft stack delivered 14% faster 
transaction rates and 24% better TCO, CheckFree chose the Windows® platform 
for the next generation of their Investment Services platform. 


To get the full case study, other case studies, and other third-party findings, 


go to microsoft.com/getthefacts 
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Windows 

Server System 


© 2005 Microsoft Corporation. All rights reserved. Microsoft, Windows, the Windows logo, Windows Server, and Windows Server System are either registered trademarks or trademarks of 
Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. 
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[| Apple’s Switch to Intel 
‘Tests the Mac Faithful 


CA Agrees to Buy 
Niku for $350M 


Computer Associates Internation- 
al inc. has agreed to buy Niku 
Corp., an IT management and 
governance software company, 
for around $350 million. CA in 
January agreed to resell and 
support Niku’s Clarity IT-MG 
software, which helps evaluate 
investments and measure the 
results of projects. Most of Niku’s 
290 employees will become 

part of CA’s Business Service 
Optimization unit. 


Citigroup Loses 
Customer Data 


Citigroup Inc. advised customers 
to take steps to protect their iden- 
tities following the disappearance 
of a package containing credit in- 
formation - names, Social Securi- 
ty numbers and payment histories 
- on 3.9 million of its CitiFinan- 
cial Branch Network customers. 
The data was stored on computer 
tapes being sent via United Parcel 
Service Inc. to a credit bureau. 


Oracle to Acquire 
Database Tools 


Oracle Corp. has agreed to buy 
TimesTen Inc., a maker of software 
that boosts the performance of 
database applications that require 
fast response times, such as stock 
trading and airline reservations 
systems. Financial details weren't 
disclosed. Oracle will use the tech- 
nology in TimesTen’s database and 
middleware products to improve 
availability and response times. 


Lenovo Unveils Its 
First Tablet PC 


Lenovo Group Ltd. unveiled its first 
pen-based computer, taking on 
offerings from Hewlett-Packard 
Co. and Fujitsu Ltd. The ThinkPad 
X41 runs Microsoft Corp.’s Tablet 
PC version of Windows, weighs 
3.5 Ibs. and is 1.14-in. thick. Mi- 
crosoft said the X41's debut will 
help broaden use of tablet PCs 
among business users. 





But users say they 
have no plans to 
switch — yet 


BY TOM KRAZIT 
PPLE COMPUTER 
Inc.’s decision to put 
Intel Corp. proces- 
sors in its Macintosh 
computers provoked a wide 
range of emotions last week 
among software developers, 
industry analysts and its fa- 
mously opinionated user base. 
For the most part, Apple’s 
network of developers ap- 
peared willing to give CEO 
Steve Jobs the benefit of the 
doubt when it came to the de- 
cision to move away from IBM 
and Freescale Semiconductor 
Inc.’s PowerPC chips. But ana- 
lysts say the decision will slow 
sales as users await the swap. 
Apple didn’t specify which 
Intel chips it plans to use be- 
ginning in 2006, but an Intel 
spokesman confirmed that 
they will be based on the x86 
architecture. 
Apple demonstrated Mac 
OS X running on a 3.6-GHz 
Pentium 4 processor during 





Jobs’ Worldwide Developer 
Conference keynote speech 
announcing the planned move. 

The switch will require soft- 
ware developers to make new 
x86-based versions of their 
products. The level of com- 
plexity will depend on whether 
developers have stayed cur- 
rent with Apple’s technology 
specifications, Jobs said. 

Developers didn’t openly 
revolt at the prospect, with 
many believing that this tran- 
sition will be much easier than 
either of Apple’s previous tec- 
tonic shifts, from Mac OS 9 
to Mac OS X and from 680x0 
chips to the PowerPC. 

The ability to have one CPU 
architecture across an entire 
environment was a big selling 
point for Nick Savvides, a de- 
veloper at the University of 
Melbourne’s Schoo! of Physics 
in Victoria, Australia. The 
school uses mostly Linux in its 
research environment but has 
been slowly introducing Mac- 
intosh systems to replace old- 
er Windows machines. 

Savvides said he will now be 
able to replace his Windows 
PCs with x86-based Macs, 


NIST Preps Compliance 
Testing Guidelines 


BY JAIKUMAR VIJAYAN 
The National Institute of Stan- 
dards and Technology will 
soon begin releasing guide- 
lines that federal agencies can 
use to assess their compliance 
with a set of mandatory infor- 
mation-security rules due to 
take effect early next year. 
The guidelines will be 
spelled out in a document that 
NIST plans to issue in draft 
form early next month. They 
are designed to enable period- 
ic testing and evaluation of the 
effectiveness of the security 
controls that federal agencies 
need to put in place, Ron Ross, 





leader of NIST’s Federal Infor- 
mation Security Management 
Act Implementation Project, 
said last week. 

The new security rules were 
detailed in Special Publication 
800-53, which NIST published 
in February. The rules cover 17 
areas, such as access control, 
incident response, business 
continuity and disaster recov- 
ery capabilities. They will be- 
come a nonwaivable Federal 
Information Processing Stan- 
dard for all federal systems ex- 
cept those related to national 
security. 

The draft assessment guide- 





ASSOCIATED PRESS 


APPLE CEO Steve Jobs said the 
move to Intel chips will be an 
easy transition for many. 


which will require some work 
but allow him to stay within 
the comfort zone of an in- 
struction set he is already 
familiar with. 

Bill Van Etten, a Macintosh 
user and genetic researcher at 
the University of Pittsburgh, 
said he doesn’t care “about 
who makes the CPU inside the 
machine. Just like I don’t care 
who makes the hard drive, the 
RAM or the LCD panel.” 

For Peter Zinsa of the Kent- 
field School District in Cali- 
fornia, the move to Intel will 


hopefully produce lower 
prices. “I pay extra for Apple’s 
hardware because it’s easier to 
maintain,” he said. 

Analyst reaction to the deal 
varied widely. 

“While we can see why 
moving to a dual-architecture 
approach may bring some 
benefits, a wholesale move 
away from the IBM chips 
would be extremely foolish,” 
wrote Gary Barnett, research 
director at London-based 
Ovum Ltd., in a note. 

But another analyst, Jack 
Gold at J. Gold Associates, 
called it “a stunningly smart 
move for Apple” in a note. 

It’s inevitable that some 
developers will have a painful 
time making the switch, said 
Kevin Krewell, editor of 
“Microprocessor Report.” 

And the transition could 
also be painful for Apple. 

“I would anticipate that anv- 
body who was thinking about 
buying an Apple system be- 
tween now and the end of 
2006, they’ll probably say, 
‘Maybe I should wait and see 
how this x86 stuff shakes 
out,” said Nathan Brook- 
wood, principal analyst at 
Insight 64. @ 54966 


Tom Krazit is a reporter for the 
IDG News Service. Computer- 
world’s Mark Hall contributed 
to this report. 





lines being released next 
month will be included in a 
companion 800-53A document 
and will describe testing and 
evaluation procedures for five 
of the 17 required controls, 
Ross said. He added that NIST 
will finalize the document and 
provide guidelines for all the 
rules by year’s end. 


Goal Is ‘Right on Target’ 
The goal is to help federal 
agencies assess whether their 
controls “have been imple- 
mented correctly, are operat- 
ing as intended and are pro- 
ducing the desired outcome 
with respect to meeting the 
organization’s security re- 
quirements,” Ross said. 
NIST’s goal “is right on tar- 
get,” said Alan Paller, director 
of research at the SANS Insti- 





tute in Bethesda, Md. Too 
often, the lack of clear guide- 
lines leads to situations where 
security mandates are inter- 
preted in multiple ways, Paller 
noted. “The greatest mistake 
is when people write what 
needs to be done but not how 
it needs to be done,” he said. 

The effectiveness of 800- 
53A will depend on the level 
of detail it provides, Paller 
said. If the guidelines are 
crafted by “policy people” 
with little hands-on experi- 
ence, they are unlikely to be 
of much value, he added. 

“If a lot of the underpinning 
details are not addressed, it 
can give a false sense of com- 
pliance,” said Will Ozier, pres- 
ident of OPA Inc., a Vacaville, 
Calif.-based consulting firm. 


@ 54963 





CFOs 
INSIST 
ON 
THEM 


If there’s one thing CIOs and CFOs can agree on, it’s Fujitsu PRIMERGY? servers. 


Featuring the proven reliability 

of Intel® Xeon” processors, PRIMERGY 
blade, rack and tower servers give ClOs the 
power to drive complex, business-critical 
enterprise applications based on Linux and 
Windows® operating systems. 

PRIMERGY servers also provide 

a low total cost of ownership (TCO), 


delivering the reliability, 


PRIMERGY RX600 
Rack Server 


PRIMERGY TX300 
Tower Server 
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PRIMERGY BX600 
Blade Server 


serviceability, and manageability CFOs 
demand. To help maintain high performance 
and low TCO, Fujitsu features Cool-Safe™ 
cooling technology. Developed with aviation 
simulation techniques, this innovative, new 
approach to thermal management optimizes 
processor airflow to keep PRIMERGY 
servers running at peak performance in 


real-world IT environments. 


For more information on the complete line of PRIMERGY servers 
and how Fujitsu PRIMERGY servers can bring ClOs and CFOs together, visit 
us.fujitsu.com/computers/PRIMERGY or call 1-800-831-3183. 
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THE POSSIBILITIES ARE 


INFINITE 
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London Man Arrested in 
U.S. Govt. Hacking Case 
OLICE IN LONDON arrested an 
ee computer systems 
administrator last week, more 

than two and a half years after U.S. 
authorities said they would request his 
extradition to answer charges of hack- 
ing U.S. federal computer systems. 

Gary McKinnon, 39, was arrested at 
his home in northeast London, accord- 
ing to a spokeswoman for the city’s 
Metropolitan Police Service. He was 
released on bail last Wednesday after a 
court hearing on extradition. 

Although McKinnon was indicted in 
a US. District Court in Virginia in No- 
vember 2002, London police received 
the extradition warrant only recently, 
the spokeswoman said. 
The warrant alleges that 
McKinnon gained illegal 
access and made unau- 
thorized modifications to 
dozens of computers be- 
longing to NASA and the 
U.S. Army, Navy, Air 
Force and Department of 
Defense between Feb. 1, 
2001, and March 19, 2002, 
she said. 

McKinnon aliegedly 
obtained administrator 
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India’s total IT services 
and business process 
outsourcing revenue 
in the fiscal year that 

ended March 31. 
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IT News Digest 


| privileges on a number of government 


computers and then used that access 
to delete user accounts and install 
software enabling him to remotely 
control the systems, according to his 
indictment. 


m PETER SAYER, IDG NEWS SERVICE 


Germany Sets Nov. Start 
For Biometric Passports 
DOSSELDORF, GERMANY 

ERMANY PLANS to be among the 
G first countries in Europe to issue 

biometric passports, starting Nov. 
1, the Interior Ministry announced ear- 
lier this month. 


The new passports, valid for 10 
years, will include an embedded radio 


| frequency identification (RFID) chip 


that will initially store a 
digital photo of the pass- 
port holder’s face. Begin- 
ning in March 2007, 
prints of the holder’s in- 
dex fingers will also be 
stored on the chip. 
Germany’s biometric 
passports are based on 
specifications approved 
in May by the Interna- 
Bae tional Civil Aviation Or- 
ganization, which has its 
headquarters in Montre- 





al. The RFID chip can be read only 
by certified reading devices, and only 
when the passport is open, officials 
said. 

The U.S. government has set an 
Oct. 26 deadline for European Union 
countries to issue biometric passports, 
but the EU is negotiating for an exten- 
sion [QuickLink 53624]. 
mw JOHN BLAU, IDG NEWS SERVICE 


Wi-Fi Network Goes 
Into Australian Bush 


SYDNEY 

NE OF THE LARGEST rural wire- 
CO: networks in Australia was 

officially launched last week at 
The University of Queensland’s Gatton 
campus. The UQconnect wireless net- 
work is designed to provide round-the- 
clock Internet access to make it possi- 
ble for teachers and students to move 
beyond the traditional classroom and 
do outside research. 

The university, located 100 kilometers 
from Brisbane, has invested more than 
50,000 Australian dollars ($37,800 U.S.) 
to develop the Wi-Fi network, which 
has 20 access points, said Nick Tate, 
the school’s director of IT services. 

“This link between the outside envi- 
ronment and the lab will speed up data 
collection and dissemination, meaning 
research output will improve signifi- 
cantly,” Tate said. @ 54932 
mw COMPUTERWORLD TODAY (AUSTRALIA) 
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Briefly Noted 


Kinpo Electronics Inc., a Taipei, 
Taiwan-based maker of electronic 
calculators, has deployed a con- 
verged voice, data and multimedia 
IP network for its 10,000 employ- 
ees, Nortel Networks Corp. an- 
nounced fast week. The network, 
based on Nortel switches and 
routers, connects facilities in 
Taiwan, China and Thailand. 


European Aeronautic Defence and 
Space Co. last week said it has 
formed an alliance with Research In 
Motion Ltd. to market BlackBerry 
devices to government agencies 
across Europe. Amsterdam-based 
EADS and Waterloo, Ontario-based 
RIM announced that they will at- 
tempt to get the devices certified 
for government use, starting with a 
security certification that’s required 
by the French government. 


Dexit Inc., a Toronto-based elec- 
tronic payments service, this month 
named David Lloyd ClO. Lloyd holds 
an MBA from Queen’s University in 
Kingston, Ontario, and was previ- 
ously senior director of technology 
services at Carlson Marketing 
Group, a unit of Carlson Companies 
Inc. in Minneapolis. 





Unisys Extends Extra CPUs 
To Data Center Servers 


BY PATRICK THIBODEAU 

Unisys Corp. last week added 
a processing capacity-on- 
demand capability to its enter- 
prise-class ES7000 servers, 
giving the Intel-based systems 
a feature that’s already avail- 
able on its mainframes and on 
machines offered by some ri- 
val hardware vendors. 

George Gray, an executive 
staff analyst at the Georgia 
Technology Authority in At- 
lanta, said the state IT agency 
uses the existing capacity- 
on-demand offering on two 
Unisys OS 2200 mainframes. 
For instance, a system that 
supports law enforcement 
activities contains eight 
processors, but only two of 





| them are running, Gray said. 


Now the IT agency is mov- 
ing more toward Windows 
systems and plans to purchase 
ES7000 machines, potentially 
in capacity-on-demand mode. 
“We're very familiar with the 
concept,” Gray said. “That’s 
why it has a great deal of sur- 
face attractiveness.” 

Blue Bell, Pa.-based Unisys 
announced a series of ES7000 
Real-Time Capacity (RTC) 
models that include four in- 
active Intel Corp. processors 
along with four, eight or 12 ac- 
tive ones. Unisys will charge a 
10% premium upfront for the 
extra CPUs. But if a user even- 
tually turns them on, the final 
cost will be no different than if 





they were initially purchased 
as active processors, said 
Mark Feverston, director of 
platforms for systems and 
technology at Unisys. 

Four ES7000 users said the 
capacity-on-demand feature 
makes financial sense only if 
processing demand is set to 
increase in the future. 

Denis Baker, CIO at Saraso- 
ta Memorial Hospital in Flori- 
da, said he doesn’t need to 
have extra processing power 
on hand for the 24- and 12- 
processor ES7000 systems he 
runs. “It’s not like we’re host- 
ing Web sites and have un- 
known demand that’s going to 
hit,” Baker said. “Our user load 
is more static than that.” 

But there are other issues 
to consider when deciding 
whether to buy processors as 
needed or go with the RTC 
model, some of the users said. 





Carolyn Lightfoot, CIO 
at Lee College in Baytown, 
Texas, has two ES7000 servers 
that she expects to grow over 
time. Lightfoot said she may 
consider RTC on future pur- 
chases because of the poten- 
tial advantage of getting 
approval for present and future 


TECHNOLOGY DETAILS 


@ Includes Xeon MP or 





expenditures at one time and 
avoiding later budget battles. 
St. Paul, Minn.-based Tech- 
nology Information Education 
Services (TIES), a nonprofit 
consortium that provides IT 
services to Minnesota schools, 
runs four ES7000 systems, in- 
cluding three with 32 Xeon 
processors each. Helmut 
Porcher, director of operations 
and system software at TIES, 
said he’s inclined to buy addi- 
tional processors as needed. 
But a downside to that is the 
short duration of processor life 
cycles, Porcher noted. He said 
that if users were to wait eight 
to 12 months to add more proc- 
essors, “you might not be able 
to buy additional processors 
that match what’s already in- 
side your server.” That could 
be a problem for users who 
don’t want to partition their 
ES7000s, he said. @ 54961 
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Larry Ellison Launches 
Storage Start-up, Array 


Pillar unveiled 


d after four years, $150M 


investment; competes with big vendors 





BY LUCAS MEARIAN 
FTER INVESTING 
four years and $150 
million, Oracle 
Corp. CEO Larry EI- 

lison has launched a new com- 

pany that offers a storage ar- 
ray that targets products from 
storage heavyweights such as 

IBM, EMC Corp. and Hewlett- 

Packard Co. 

Pillar Data Systems Inc. in 
San Jose unveiled its first 
product, called Pillar Axiom, 
which offers storage-area net- 
work (SAN) and network- 
attached storage (NAS) capa- 
bilities under a single manage- 
ment interface. 

The product also features 
multiple quality-of-service 
levels. The array is currently 
based on Advanced Technol- 
ogy Attached disk drives and 
will offer higher-performance 
Fibre Channel drives by the 
end of the year. 

While wary of Pillar’s status 
as a start-up in an already sat- 
urated market, some users 


| 
| 


1 


said the backing of Ellison iat 
his investment firm, Tako Ven- 
tures LLC, helped convince 
them to kick the tires on the 
technology. 

“This start-up is well fund- 
ed enough in comparison to 
others,” said Christopher 
Hill, associate director 
of information ser- 
vices at Thacher 
Proffitt & Wood 
LLP, a New York- 
based law firm that 
specializes in fi- 
nancial services. 

“They have some 
built-in buyers who 
will give us a com- 
munity, one of 
which is obviously 
Oracle.” 

Pillar CEO Mike 
Workman, a for- 
mer IBM storage 
executive, said the 
company set out 
to build a storage 
system based on 
commodity stor- 


age hardware that doesn’t tar- 
get only a single application, 
such as transaction data stor- 
age file serving. 

Thacher Proffitt & Wood 
replaced an outdated EMC 
Clariion 4700 in its New Jer- 
sey office with a Pillar Axiom 
about a month ago, Hill said. 
Since then, he has used the 
new box in its SAN configura- 
tion as the remote backup to 

an EMC Clariion CX600 
array in the firm’s New 
York office. 


High Marks 
Hill gave Pillar’s ar- 
ray high marks on 
price, ease of use 
and functionality. 
He estimated that 
an EMC system 
similar to his 
$100,000 Pillar 
box would cost 
around $400,000. 
Proprietary soft- 
ware allows the 
Axiom to create 


PILLAR’s new Axiom 
array offers SAN and 
NAS capabilities. 


| multiple service levels 
| through its placement of data 


on its disk drives. 

The outer edge of the drives, 
closest to the read/write head, 
is reserved for higher-perfor- 
mance applications, while the 
center and inner edge are used 


| for lower-performance needs, 


Workman explained. 

“If that method can be 
proven [to] help performance, 
that’ll be really cool,” said 
Tony Asaro, an analyst at En- 
terprise Strategy Group Inc. in 
Milford, Mass. 

Other analysts, however, 
said they wonder why Ellison 
invested so much time and 
money in Pillar. 

For instance, John Webster, 
a storage analyst at Data Mo- 
bility Group in Nashua, N.H., 
questioned Ellison’s motives 
for his attempt to break into a 
business that is undergoing 
consolidation among even ma- 
ture players. 

One example of that consol- 
idation trend, said Webster, is 
Sun Microsystems Inc.’s recent 
acquisition of onetime indus- 
try leader Storage Technology 
Corp. [QuickLink 54817]. 

“He just wants to be a dis- 
ruptor for whatever reason. I 
don’t know if he has it in for 
the people already there or he 
sees this as a strategic place he 
needs to be,” Webster said. 

Chris Butler, chief technolo- 


i [Ellison] just 

wants to be a 
disruptor for whatev- 
er reason. | don’t 
know if he has it in for 
the people already 
there or he sees this 
as a strategic place 
he needs to be. 


JOHN WEBSTER, STORAGE 
ANALYST, DATA MOBILITY GROUP 


gy officer at San Francisco- 
based I/Pro Corp., has been 
testing an Axiom array in its 
NAS configuration since early 
December. 

“I wouldn’t call it excellent 
yet, but it’s good,” he said. 

After his EMC Symmetrix 
array failed three years ago, 
requiring a major system shut- 
down to restore data, Butler 
said he became willing to take 
a chance on new technology. 

“The throughput on the 
head is as good as I’m seeing 
with my [NetApp 880 NAS 
array],” he said. @ 54937 


MORE STORAGE NEWS 


Go to the Storage Knowledge Center on our 
Web site for extensive coverage of storage 
technology and issues: 


QuickLink k1700 
www.computerworld.com 





Continued from page 1 
sarb-Ox 


Antonellis said. 

Last month, the SEC and the 
PCAOB, a regulatory body set 
up to oversee auditors of pub- 
lic companies after Sarbanes- 
Oxley was approved in 2002, 
began easing the compliance 
burden by issuing guidance 
aimed at limiting the number 
of IT controls that companies 
have to document [QuickLink 
54486]. 

Meanwhile, President Bush 
earlier this month nominated 
Rep. Christopher Cox (R- 
Calif.), who is viewed as a pro- 
business legislator, to succeed 
William Donaldson as chair- 
man of the SEC. Some ob- 
servers expect that move to 





lead to additional reforms that 
ease compliance with the law. 

But any future revisions to 
Sarbanes-Oxley that may tran- 
spire will likely be too little, 
too late for many IT managers 
forced to undertake massive 
documentation projects over 
the past 18 months. 

Documenting IT controls 
“is almost like copying words 
out of a dictionary as a pun- 
ishment,” noted John Hagerty, 
an analyst at AMR Research 
Inc. in Boston. 

But once companies have 


| documented those controls, it 


shouldn’t take nearly as much 
effort in future years if they 
have automated those proc- 
esses and made them repeat- 
able, Hagerty said. 

Still, further reforms would 
be helpful, executives said. For 





example, the PCAOB should 
address some of the inconsis- 
tencies with its Auditing Stan- 
dard No. 2, said Colleen Cun- 
ningham, president and CEO 
of Financial Executives Inter- 
national, an association of U.S. 
and Canadian executives 
based in Florham Park, N.J. 
Under that PCAOB 
standard, it’s assumed 
that if documentation 
for a company’s inter- 
nal control doesn’t 
exist, then the control 
itself doesn’t exist, 
said Cunningham. “I 
think that’s where a lot 
of the cost came from, 
particularly with a lot 
of smaller companies, 
where the controls are 
informal but may not 
be documented and 





State rae 
Corea lt ei em) Ge 
tensive testing 

“to validate 

what we al- 
ready knew.” 


would otherwise be consid- 
ered a deficiency,” she said. 

Other IT executives said 
that the IT controls require- 
ments have helped improve 
the integrity of their opera- 
tions, but they agreed that the 
Act’s documentation demands 
can be excessive. 

“While I have yet to 
see any compliance re- 
quirements that are 
not good, the nature of 
the compliance overall 
tends to lead to an in- 
creased level of bu- 
reaucracy,” said Tony 
Fuller, vice president 
of IT and CIO at Rent- 
A-Center Inc. in Plano, 
Texas. 

“This has become 
the greatest challenge, 
because it easily cre- 





ates a tendency to staff [the 
IT organization] according 

to who can follow the process 
the best, not necessarily who 
is best able to improve upon 
the process, very easily shut- 
ting out individuals that are 
entrepreneurial,” Fuller said. 

Yuri Aguiar, chief technolo- 
gy officer at Ogilvy & Mather 
Worldwide in New York, said 
he would like to see the SEC 
and PCAOB come up with 
more prescriptive compliance 
requirements. 

That’s because the current 
policies are left open to inter- 
pretation, leaving corporate 
officers at risk of either under 
estimating the requirements 
and doing too little to comply, 
or overestimating the require- 
ments and doing too much, 
Aguiar said. @ 54952 
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At one time, DHL had a data center in every country in which = : Spe 
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DON TENNANT 


Certifiably Concerned 


OFTEN TELL PEOPLE that as a journalist, 

there’s no beat I’d rather cover than informa- 
tion technology. The reason is simple: I can’t 
think of a discipline that has a greater impact 
on people’s lives or a profession that is popu- 


lated by more talented, 
dedicated individuals 
who epitomize what it 
means to persevere. 

If I hadn’t already felt 
that way, attending the 
Computerworld Honors 
event in Washington last 
week would have won 
me over. Read about the 
people and pursuits that 
were honored this year 
in our special report be- 
ginning on page 4, and 
you'll understand what I’m talking 
about. Your colleagues have set the 
bar high. 

It’s because I have an equally high 
regard for the IT profession that I 
was bothered by a study we covered 
last week on the salaries being paid 
to IT professionals with technical 
skills [QuickLink 54903]. According 
to the Foote Partners study of 48,000 
IT workers in the U.S. and Europe, 
compensation for those who lack 
technical certifications increased by 
2.8% in the first quarter of 2005, 
while pay for workers with certifica- 
tions increased by only 0.6%. And 
for the full year that ended April 1, 
workers without certifications en- 
joyed an average pay increase of 
3.6%, while those with technical cer- 
tifications saw an increase of 2.9%. 

If you found yourself reading that 
paragraph twice because it seemed 
sort of backward, you got it right the 
first time. So, what on earth would 
account for the counterintuitive re- 
sults? Why would noncertified work- 
ers fare better than certified work- 
ers? Foote Partners President David 
Foote chalks the findings up to what 
“could be the beginning of a trend” 
— a greater appreciation for skills 
demonstrated through real-world 
experience than for the certifications 





themselves. “It might 

be the reversal of the 
past when you had to 
have certifications to 
prove you had the skills,” 
Foote says. 

Granted, it’s only one 
study, and the suggestion 
that it heralds a trend is 
a bit of a stretch. But it 
does legitimately raise a 
red flag. Any hint that 
companies are de-em- 
phasizing the technical 

certification process is troubling, be- 
cause it could so easily have a nega- 
tive effect on professional standards. 
I’m as big a believer as anyone in the 
importance of on-the-job training 
and real-world experience, but that 
doesn’t begin to obviate the need for 
a formal certification program. 

In a world where risk manage- 
ment and business continuity plan- 
ning are essential pursuits for any 
healthy IT organization, every asset 
needs to be defined and monitored, 
and that includes technical skills. 





There’s no better way to accomplish 
that than through a consistent, well- 
conceived means of documenting 


| who has what skills. And that means 


certification. 

The IT profession’s culture of 
requiring the certification of skills 
acquisition has always been an ad- 
vantage. Other entities — the U.S. 
armed forces come to mind — share 
that advantage. 

There’s an associated demand for 
excellence that’s well worth emulat- 
ing, which is why I'd be all for having 
formal skills certifications in jour- 
nalism. Since we in this career field 
really have no formal certification or 
licensing mechanism, anyone can 
call himself a journalist — and let’s 
face it, the shoddiness that situation 
enables often shows. I'd even make 
certifications revocable. Taint the 
profession by making up sources, for 
example, and kiss your certification 
goodbye. 

So if you perceive even a subtle 
cultural shift away from certification 
in your organization, do something 
about it. In the process, you'll be 
keeping the bar up high where it 
belongs. @ 54921 
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MICHAEL H. HUGOS 


IT and Its 
Reputation at 
A Crossroads 


HE IT profession is at a 
turning point. One siz- 
able group of IT practi- 


tioners already knows what needs to 
be done. Another continues to apply 
the same old ways of doing things that 
result in the same old horrendously ex- 
pensive systems that often don’t work. 
What differentiates one group from 
the other? The manner in which they 
perceive and respond to complexity. 

People not skilled in the use of effec- 
tive techniques for dealing with com- 
plexity usually fall back on the use of 
clumsy, siow-moving, bureaucratic 
ways of doing things. In most situa- 
tions, these approaches aren’t up to the 
challenge. They fail, and the reputation 
of the IT profession is tarnished each 
time that happens. 

A good example of 
this is the recent col- 
lapse of a multiyear, 
multimillion-dollar 
project to upgrade 
application systems 
used by the Internal 
Revenue Service. 

People on this proj- 

ect looked at the 
complexity involved 

and were totally 
overwhelmed. 

They responded by 
adopting cumber- 

some procedures 

that tried to handle 
everything. Analysts 
analyzed and pro- 
grammers pro- 
grammed as docu- 
ments piled up and the years went by. 
Nothing useful got done. 

Another approach would be to re- 
spond to complexity by making rigor- 
ous use of the six core techniques I 
outlined in a previous column [Quick- 
Link 53699]. You can use these tech- 
niques to reduce complexity into man- 
ageable, self-contained pieces. You can 
make progress right away on the sim- 
pler pieces and build solutions to the 
more complex pieces over time. 

One reader who belongs in that 
group of IT practitioners who know 
what needs to be done sent me a won- 
derful way to solve the problem. It’s 
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elegant in how it uses just a handful of 
techniques to address complexity. 
“Process each account in its own thread 
— not whole files; it greatly reduces 
complexity and latency and increases 
scalability,” he wrote. “Use pipe-and-fil- 
ter with no intervening files instead of 
file-process, file-process, etc. This ar- 
chitecture was described by Mary Shaw 
at Carnegie Mellon years ago. 

“Design and write a separate thread 
for each business case, beginning with 
the most common or simplest, e.g., do- 
mestic exempt salaried employee,” he 
continued. “The IRS could have been 
processing all simple 1040 returns in a 
matter of months on the new system 
instead of taking years trying to devel- 
op monolithic, all-case, highly complex 
systems. In my scenario, there might 
be 30 or more separately designed and 
written processes handling business 
case threads.” 

Go to Google, type in “pipe-and-fil- 
ter,” and read some of the references 
that come up. It’s a great approach. It 
uses combinations of four core tech- 
niques: joint application design, proc- 
ess mapping, object-oriented design 
and programming, and system proto- 
typing. Any IT practitioner skilled in 
these techniques will quickly grasp the 
main concepts of this approach and be 
able to put them to good use. And there 
are plenty of other such approaches 
that also use combinations of the core 
techniques to effectively deal with 
complexity. 

So, which way will IT go as a profes- 
sion? Every successful profession must 
develop a set of core techniques that 
enable its practitioners to succeed in 
their endeavors most of the time. We 
can allow ourselves to be intimidated 
by complexity and cling to ineffectual, 
bureaucratic approaches that give us a 
reputation as a bunch of not-so-lovable 
screw-ups. Or we can rise to the chal- 
lenge and become practitioners of a 
profession respected for its ability to 
apply technology effectively in com- 
plex situations. @ 54800 


DAN GILLMOR 


Law and the 
Spyware 
5 


FTER A U.S. Senate 
hearing earlier this 
month, one senator 


was quoted as likening spy- 
ware to “somebody walking 
around your house, kind of 
invisibly.” The analogy was 
inadequate. 

Spyware is more like 
someone planting hidden 
cameras and microphones 
around your house and of- 
fice, and even in the bath- 
rooms. It’s just about the 
sleaziest online activity 
there is. 

Given the severity of 
the problem, one might be 
pleased to hear that Con- 
gress seems fairly serious 
this year about doing something about 
it. But it’s too soon to get our hopes up. 
For a variety of reasons, including the 
sheer indifference of the bad guys to 
the rule of law, this plague will be enor- 
mously difficult to slow, much less halt. 

The stakes are high and growing. 
Nothing less than the future of online 
commerce and communications may 
ride on whether we find ways to deal 
with spyware. 

One of the big problems is with defi- 
nitions. Is “adware” — software that 
pollutes your computer with unwanted 
advertising — spyware? I think it can 
be, certainly when users don’t realize 
that clicking “yes” on a terms-of- 
service box for a product will lead to 





the installation of adware. 
This is all too common. 
The adware industry is 
making some moves to- 
ward real legitimacy. But as 
long as such software con- 
tinues to find its way onto 
people’s computers with- 
out genuine, knowledge- 
able consent, the adware 
industry won't have my re- 
spect. (I urge you to visit 
Harvard law student Ben- 
jamin Edelman’s excellent 
site at www.benedelman.org 
if you are interested in the 
machinations of the adware 


| companies.) 


We can all agree that some kinds of 
malware are just plain bad. In this cate- 
gory, I’d include keystroke recorders 
and other surveillance tools that cap- 
ture what we type and send it else- 
where. (I should note that companies 
put such things on employees’ com- 
puters all the time. As long as they tell 
the employees they're doing it, they 
have the right, even if the practice is 
a bit nasty.) 

The main problem with the pro- 
posed laws is the fact that the U.S. isn’t 
an island on the Internet. The global 
nature of networks means we have to 
deal with international criminals. 

“The guys out of Russia or wherever, 
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they’re untouchable,” notes Richard 
Smith, a computer security expert. 
But having some new tools to fight 
domestic bad guys — such as class- 
action lawsuits — is better than noth- 
ing, he says. 

In theory, current law already pro- 


| vides for prosecution and punishment 
| of the worst offenders. Also in theory, 


software tools could solve the problem. 
IT people need to explain to market- 


| ing people that it is never acceptable 
| to install unwanted software on cus- 


tomers’ computers. And marketing 
people need to understand what they 
risk if they go ahead and do it. 

What they risk with me is simple: 


| If I learn that a company has even at- 
tempted to pull a fast one, I put it on 


my personal blacklist, which means 
never doing business with it again. 

I also never do e-commerce on a 
computer I don’t own. And, given Win- 
dows’ history as the vehicle for the 
worst spyware, I use a Mac. 

I wish Congress the best in its ef- 
forts to help end the spyware plague. I 
suspect, however, that in the end, the 
law will be just one relatively minor 


tool. @ 54869 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/columns 








No ‘0’ in Quality 

*M AN EXPERIENCED American 
| software developer whose com- 
pany is on the verge of embarking 
ona collaborative outsourcing ex- 
periment. | had to chuckle at the 
management consultant in the story 
“Outsourcing: The ‘O’ Word Recon- 
sidered” [QuickLink 54064] who 
asks, “What is our cost per line of 
code versus the best in the world?” 
The real question to ask is, “How 
good is our code, and how do we 
know?” What if your outsourced 
team churns out thousands of poor- 
ly designed, inefficient lines of code 
at half price, but over the life of that 
code you end up paying many times 
the original development cost due 
to increased maintenance and de- 
creased flexibility/extensibility? Did 
you really get that great of a deal in 
the long run? IT management and 
management consultants need to 
realize that quantifiable quality is 
the way to achieve long-term low 
costs, regardless of who does the 


| work, how fast they do it or how 
| much you pay them. 

| Chad Woolley 

| Software developer, 

| Tucson, Ariz. 


LTHOUGH THE WORD out- 
sourcing was in the headline, 
the story was about offshoring. A 


| pet peeve of mine is the way the IT 
| profession uses one term to mean 
| another. When did the word out- 


sourcing become co-opted by off- 
shoring? However, whether “out” or 
“off,” the concepts are onerous for 
most IT folks. IT management can 


| try to put a positive spin on these 


concepts, but for the majority of 
people in this profession, it is bad 
news. What is most disturbing for 
both of these trends is that the ben- 
efits are usually overstated and 
costs understated. If the history of 
offshoring is anything like outsourc- 
ing’s, businesses will be rethinking 
their decisions within about five 
years. Maybe IT management 





needs to go back to school to reskill 





themselves on preparing realistic 
business cases for either outsourc- 
ing or offshoring. 

Bob Zimmerman 

IS project manager, 

City of Antioch, Calif., 
rzimmerman@ci.antioch.ca.us 


| The Lost Generation | 


T'S A FALSE ASSUMPTION that 
managers have time for proper 


succession planning, but it can also | 


be argued that no manager is eager 
to train his own replacement 
[“Grooming the Next Generation,” 
QuickLink 54219). Will older, more 
experienced managers believe 
there is a possibility that they could 
be laid off once their replacements 
have been trained? Possibly. Would 
that opinion affect succession plan- 
ning efforts and timetables? Defi- 
nitely. 

Another argument could be that 
the next generation of IT leaders is 
being effectively killed off by reck- 
less outsourcing. Responsible out- 


| sourcing or offshoring has shown 
itself to be a highly productive 
method for application develop- 

| ment, but reckiess outsourcing and 

offshoring of IT functions resulting 

| in thousands of IT professionals be- 
ing laid off causes tomorrow's po- 

| tential IT leaders (who are still in 

school today) to see other career 

possibilities as more attractive 

than IT 

| Harold Carruthers 

St. Peters, Mo. 


| COMPUTERWORLD welcomes 

| comments from its readers. Letters 

| will be edited for brevity and clarity. 

| They should be addressed to 

| Jamie Eckle, letters editor, Com- 

| puterworld, PO Box 9171, 1 Speen 

Street, Framingham, Mass. 01701. 

Fax: (508) 879-4843. E-mail 

letters@computerworld.com 

Include an address and phone 

number for immediate verification. 
For more letters on these and 


other topics, go to 
www.computerworld.com/letters 
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Anticipation 


Text mining and real-time 
applications have improved 
the accuracy and timeliness 
of predictive analytics, making 
ita better bet for businesses. 


RICHARD BORGE 


N THE MOVIE Minority Report, 
Tom Cruise’s character relies 
on visions from “precogs,” peo- 
ple who can predict crimes, to 
catch criminals before they can 
act. While the film takes place in the 
future, the predictive analytics tool 
sets available to businesses today are bring- 
ing similar scenarios to life. 
For example, LoanPerformance uses such tools 
to help its clients predict which of their customers 
will be late with payments, which will be lying when they ~. 
Continued on page 24 
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say the check is in the mail and which 
will be likely to default altogether. The 
San Francisco-based firm operates a 
cooperative database of loan payment 
information for financial institutions. 
Richard Harmon, senior vice president 
of scoring and analytic services at 
LoanPerformance, says its customers, 
which include mortgage servicers, use 
the data to encourage on-time pay- 
ments or to put delinquent accounts 
on the fast track to foreclosure. 
Predictive analytic tools are also 
used to predict outright fraud. For ex- 
ample, at health insurer Highmark Inc. 
in Pittsburgh, such systems are set to 
anticipate and block fraudulent claims. 
The adoption of predictive analytics 
systems is on an upswing, driven by 
technology advances and the potential 
for large bottom-line benefits. The 
number of preconfigured and proven 
models available for specific industries 
and applications is increasing, while 
the model-creation process is more au- 
tomated than it once was. That means 
analysts can build models faster — and 
refresh them more frequently in re- 
sponse to changing business needs. 
Successful models can pay off big. 
At LoanPerformance, a model that pre- 
dicts which accounts that are 90 days 
in arrears will default saved one client 
$2 million in six months. The total cost 
of deployment was $400,000. Those 
types of returns are one reason why 
IDC research shows the sale of predic- 
tive analytics tools growing to $3 billion 
by 2008, which would be a nearly 40% 
increase from 2004. Such tools make up 
25% of the business intelligence market. 
As the volumes of business data 
have increased, the desire to extract 
value from that information has inten- 
sified. Fortunately, predictive analytics 
tools have become easier to use, says 
Harmon, allowing more streamlined 





model-building workflows and en- 
abling analysts steeped in business 
issues to do more without the involve- 
ment of statisticians. “This is where 
the future lies,” he says. “The tools are 
being automated.” 

The biggest benefits, however, are 
coming on two fronts: the inclusion of 
unstructured data into the predictive 
modeling process to improve accuracy 
and a push to execute predictive ana- 
lytics and present results in real time. 

Predictive analytics in- 
volve several steps, rang- 
ing from identifying and 
preparing target data to 
developing a statistical 
model, testing it on a 
sample for accuracy and 
then running it against 
the full data set. Results 
are sent to front-office 
systems, where business 
logic is used to, for exam- 
ple, cross-sell a customer 
a different product or flag an insurance 
claim as potentially fraudulent. While 
most organizations customize predic- 
tive models to their customer bases and 
business challenges, many processes for 
finding models have been automated. 

More challenging are efforts to 
achieve real-time results. They fall into 
three categories: enabling real-time 
scoring on the front end when, say, a 
new loan application comes in; updat- 
ing the back-end databases; and accel- 
erating the pace at which models can 
be refreshed to deal with changing sce- 
narios, which can be helpful because 
criminals are constantly devising new 
ways to commit fraud, for example. 


Texting It Up 
Harmon says he was surprised at how 


much text mining increased the accu- 
racy of his predictive models. The pre- 
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vious model included structured infor- 
mation such as loan histories, credit 
reports and demographics. He added 
textual notes entered by call center 
staffers as they spoke with customers. 

“That information tends to be very, 
very rich, despite the fact that it tends 
to be very noisy,” Harmon says. He 
used tools from Intelligent Results Inc. 
in Bellevue, Wash., to analyze linguis- 
tic data and identify when someone 
may be lying. For example, if someone 
says, “The check is in 
the mail,” that might be 
one indicator. “What 
we're looking for is not 
just the words, but the 
patterns that lead to an 
event,” says Harmon. 

“The text-alone mod- 
els worked better than 
our standard models,” 
he says. When Harmon 
mixed the text with 
structured data, accura- 
cy improved by 18% over his original 
model. 

J.D. Power and Associates is in the 
early phases of testing text mining. 
The Westlake Village, Calif.-based 
customer research firm wants to use 
verbatim comments from surveys to 
create an early warning system that 
predicts warranty problems for auto- 
mobile manufacturers. 

J.D. Power is currently experiment- 
ing with a tool from ClearForest Corp. 
in Waltham, Mass. Preliminary testing 
has shown that written responses are 
more useful in predicting the nature of 
a given problem than are structured, 
check-box answers, says Joe Ivers, ex- 
ecutive director of quality and cus- 
tomer satisfaction research. 

While written comments are pro- 
vided to J.D. Power’s customers, the 
volume of surveys makes it hard for 
the automakers to identify unforeseen 
problems with vehicles. The manufac- 
turers want to catch such problems 
before iarge volumes of new vehicles 
have shipped. “By the time something 
appears frequently enough to appear to 
the unaided eye, it’s too late,” Ivers says. 

Nextel Communications Inc. in Re- 
ston, Va., uses Enterprise Miner from 
SAS Institute Inc. in Cary, N.C., to 
make predictions based on text cap- 
tured in call center dialogues. 

Scott Radcliffe, director of decision 
sciences, says the telecommunications 
company relates “key phrases that 
occur during customer interactions” 
with future customer churn. It has 
been able to reach out to those cus- 
tomers before they actually leave — a 

Continued on page 26 
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For some companies, outsourcing predictive 
analytics makes sense 
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telecommunications market. 

For 14 Commerce Inc., which must 
approve or deny an online transaction 
request in under four seconds, real- 
time analytics is the name of the game. 
Merchants use the company’s “Bill Me 
Later” service to offer credit to a mer- 
chant’s customers without the need to 
present credit card information over 
the phone or the Internet. Tom Keithly, 
vice president of credit and integration 
at 14, says his staff used a predictive 
analytics workbench from Toronto- 
based Angoss Software Corp. to devel- 
op a model that can score each request 
to identify fraudulent transactions. 

“Our credit decision occurs in real 
time, and each database we go to is 
maintained in real time,” Keithly says. 
Inputs include credit reports, demo- 
graphics, telephone number verifica- 


tion and the vendor’s own internal cus- | 


tomer histories. As soon as a customer 
completes a transaction, the system up- 
dates that customer’s risk score. To do 


that, Timonium, Md.-based I4 pulls data | 


from its live Oracle database rather 
than using its data warehouse. “We only 
use the data warehouse to develop new 
versions of the [model],” he says. 

Although he could use tools like 
SPSS Inc.’s Clementine scoring engine 
to download data and deliver the re- 


| sulting scores, Keithly says that ap- 


PreTell Fingers Refinancers 


Planning on prepaying your home 
loan and refinancing through an- 
other vendor? Expect a call from your 
bank. LoanPerformance is about to 
launch PreTell, a predictive analytics ap- 
plication for lenders and other financial 
institutions that will analyze loans and 
return projected cash flows for them. 
“We're developing a prepayment scoring 
platform that tells who will pay off early in 
the next six or 12 months,” says Richard 
Harmon, senior vice president of scoring 
and analytic services. 

The system will also be the first from 
LoanPerformance that accesses live 
data, including property record data, de- 
mographics and loan-specific informa- 
tion. “It sends out the name and address 
of the loan or loans to score, matches 
that with the data vendors, pushes it 
back to the scoring platform and then 
automatically scores those loans,” says 
Harmon. The service took three years to 
develop and is in beta with 12 customers. 
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It's slated for release in July. 
LoanPerformance built the analytic 
model using technology from Kxen Inc. 
in San Francisco. The company excels 
in large, complex data structures where 
many possibilities must be examined, says 
independent analyst Lou Agosta. Although 
Kxen isn’t as big as other vendors, its 
technology has been embedded in prod- 
ucts from other software vendors, includ- 
ing Business Objects SA, and is well 
regarded by users. “When | talk to their 
references, they are so enthusiastic about 
them,” Agosta says. “It shows that there 
is real innovation going on in this area.” 
Eventually, PreTell could have a signifi- 
cant impact on the market for mortgage 
securities. “[PreTell] will lead to risk- 
based pricing of mortgage notes,” pre- 
dicts Harmon. But the more immediate 
benefit is that it will give mortgage ser- 
vicers an opportunity to get their own of- 
fers to customers before they refinance. 
- Robert L. Mitchell 








much latency for the response time he 
required. Instead, he took the algo- 
rithms built by the modeling system, 
compiled them in Java and runs them 
on I4’s production servers. “It’s just 
pure math. It operates as logic in the 
production system,” he says. 


Real Deal 


A critical difference in using predictive 
analytics is the speed at which models 
can be refreshed, Keithly says. While 
the mainframe systems he used years 
ago only allowed model development 
every two years, his current tool set al- 
lows him to refresh the model every 90 
days. But that’s still not real time. For 
most applications, the ability to refresh 
the model every quarter is adequate, 
says Keithly. However, he sees areas in 
which real-time models would be use- 
ful, such as fraud, where assumptions 
must be changed in response to chang- 
ing perpetrator tactics. Keithly expects 
to see real-time modeling in the next 
decade. “It will be worth it as long as it 
doesn’t take a massive investment to 


make it work,” he says. 


But a massive investment is often 
required for organizations to provide 
real-time access to data. I4 is relatively 
small and built its IT systems from 
the ground up in 2001 using state-of- 
the-art technology, including Solaris 


| servers and Oracle databases. For large 
| companies with older equipment and 


databases, that’s more of a challenge. 

“If data is divergent across multiple 
sources and you need to bring a data 
warehouse together, that’s consider- 
ably more money,” says Christopher 
Scheib, manager of decision support 
at Highmark. 

Peter Heijt, vice president of market- 
ing and sales at Fortis Banque SA/NV 
in Utrecht, Netherlands, wants to pro- 
vide real-time access to data for pre- 
dictive analytics applications that will 


| paigns. “The investment is more or 


less double the cost of the data struc- 
ture we have now in data warehouse, 
data mart and CRM. So the payoff has 
to be big. We're looking for a 40% in- 
crease in sales effectiveness,” he says. 


| Heijt is experimenting with a small 


part of his CRM database to see if the 


| investment is justified. 


Scheib says he needs access to out- 


| side data in real time to facilitate deci- 


sions on how to price policies. “Pre- 
scription information we can get in 
very close to real time, and we can use 
that to make predictions about health 
risks,” he says. “That’s useful for actu- 
aries who are trying to price clients in 





Maa 


Predictive analytics tools are available 
as stand-alone products but are also 
increasingly embedded within other 
software. Options include the following: 


@ Development workbench tool 
kits are available from vendors such 
as SAS and SPSS. These vendors 
offer extensive suites of tools that in- 
clude both model development and 
execution. For example, the server- 
based Clementine scoring engine 
from SPSS can run a model against a 
data set and return the results to a 
database or data warehouse. All in- 
clude a development platform where 
users can create an application, says 
independent analyst Lou Agosta. 


predictive analytics capabilities that 
may be adequate for some business 
needs as extensions to their products. 
Examples include IBM Intelligent Data 
Miner for DB2 and Teradata Ware- 
house Miner. 


dors also offer limited predictive ana- 
lytics features within their product sets. 
One example: SAP's Advanced Plan- 
ner and Optimizer. The trend is toward 
greater integration of predictive ana- 
lytics within line-of-business applica- 
tions, says IDC analyst Henry Morris. 


offer predictive modeling targeted to 
the specific needs of a specific vertical 
market. They are available from SPSS 
and other vendors, but they're relative- 
ly new. 

- Robert L. Mitchell 


as near to real time as they can get.” 
While predictive analytics tools have 


gotten easier to use, successful enter- 
| prise implementations still require col- 


laboration among business analysts, 
statistics experts and database admin- 
istrators, say users. “Data preparation 


| can be 60% of the effort,” says Lou 
| Agosta, an independent technology 
| analyst in Chicago. 


But the biggest challenge may be in 
learning how to take full advantage of 


| the opportunities that predictive ana- 
| lytics can provide. Developing the right 
| responses is what takes the most time, 


says Harmon. “Having better predictive 
models has allowed everyone to re- 
evaluate their strategies. That’s where 
the intellectual capital is spent,” he 


says. @) 54732 
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Multidimensional Database Combines 
Robust Objects And Robust SQL. 
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Rapid Integration Platform 
Makes Applications Perform In Concert. 


Imagine being able to get your applications to 
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Lull in Action Is Time 
To Tie Up Loose Ends 


The blackout at the end of the quarter is a 
chance for documentation and evaluation 
of new technologies. By Mathias Thurman 


Y COMPANY’S quar- 

ter-end blackout 

always means we’re 

in for a slow week, 
since we can’t make any 
changes to our production en- 
vironment. When I have some 
extra time like that, I usually 
like to catch up on documen- 
tation and evaluate 
new technology, and 
that’s what I did 
when this past quar- 
ter ended. 

As I’ve mentioned 
in previous articles 
[QuickLinks 51226, 
54514], our mass deployment of 
RSA Security Inc.’s SecurID to- 
kens is a critical project, touch- 
ing thousands of users. Failure 
is not an option, and the defini- 
tion of failure could include 
a deployment that generates 
thousands of help desk support 
calls. To keep that from hap- 
pening, documentation and 
training are part of the deploy- 
ment strategy. 

Happily, I was able to get 
some cycles from another 
department’s technical writer, 
who created some Web con- 
tent about two-factor authen- 
tication that can eventually be 
made available to the masses. 
If we start raising awareness 
early and drill some of the 
new lingo associated with this 
project into employees’ heads, 
the deployment will have a 
better shot at success. 

There are three important 
terms users must be familiar 
with. The first is tokencode, 
which refers to the number 
displayed on a token. The next 
is PIN, which is the personal 
identification number each 
user will define and use as a 
password. The third term is 
passcode, which the PIN and 
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tokencode combine to form. 

Those three terms are the 
usual causes of support calls in 
a SecurID rollout, and we want 
to clear up confusion before- 
hand so that users don’t beset 
the help desk. We also hope to 
curb the number of support 
calls by finding a way to de- 
ploy the software to- 
kens without users 
having to do any- 
thing other than set 
their PINs. We’re 
diligently working 
on that, and I will re- 
port on our progress 
in my next installment. 


WAP Strategy Session 


On another front, I’ve been 
talking to Alpharetta, Ga.- 
based AirDefense Inc., which 
has an appliance for detecting 
rogue wireless access points 
that integrates with the Cisco 
access points we have already 
deployed en masse. I received 
one of the appliances to evalu- 
ate today, and I managed to 
get it racked and powered and 
will start testing within the 
next week or so. I also re- 
ceived several access points 
from Cisco that I will config- 
ure as sensors. 

AirDefense claims that 
when the Cisco sensors dis- 


at a retail store. 





cover an access point, its 
appliance can determine 
whether it’s on our network. 

I plan to deploy some low- 
cost access points that I or- 
dered from Office Depot. I fig- 
ure that employees who set up 
unauthorized access points 
will probably buy their hard- 
ware at a retail store rather 
than spend several hundred 
dollars on a Cisco access 
point. I ended up getting 
six different wireless access 
points/routers. I'll place four 
of them on our network at var- 
ious locations and one on an 
external Digital Subscriber 
Line, which we use for trou- 
bleshooting external access is- 
sues. I’ll power up the remain- 
ing access point, but I won’t 
connect it to any networks. 

AirDefense’s technology 
could play a significant part 
in our strategy for detecting 
rogue wireless access points. 
We can’t rely solely on scan- 
ning the network or grabbing 
the media access control ad- 
dresses off of our switches. 
Those methods are also very 
important in our overall strat- 
egy, but if the AirDefense ap- 
pliance is sound, we will have 
a robust approach to discover- 
ing unauthorized access points 
on our network. I'll keep you 
informed about this as well. 


Implications of Growth 


The enforced downtime at the 
end of the quarter allowed me 
to contemplate the implica- 
tions of the fact that our com- 
pany is growing by leaps and 
bounds. We've added several 
thousand users and millions of 
dollars in servers and other in- 
frastructure over the past sev- 
eral years. My department has 
deployed technologies such as 
two-factor authentication and 
Tripwire Inc.’s software for in- 
trusion detection and preven- 
tion, and we're evaluating iden- 
tity management software. 








We're also getting ready to 
deploy disk encryption, and 
we continue to conduct vul- 
nerability assessments at the 
network, host and application 
levels. My people are present 
at almost every major meeting 
concerning architecture, 
change control and project 
intake. We also write policies, 
procedures and guidelines and 
are responsible for the care 
and feeding of our entire secu- 
rity infrastructure. My depart- 
ment is solely responsible for 
everything from administra- 
tion of our authentication 
systems to troubleshooting 
problems. We’re becoming 
overloaded with work. 

I continually make upper 
management aware of our 
workload and have requested 
additional head count, but I’ve 
always been met with resis- 
tance, mainly because of bud- 
get constraints. In large com- 
panies, it’s pretty standard for 
the information security de- 
partment to have one engineer 
for every 1,000 employees. I 
have seven engineers for a lit- 
tle over 8,000 employees, so 
we're about one engineer shy 
of the standard. 

Relief may come in the form 
of four data center operations 
employees taking over securi- 
ty analysis. If executed prop- 
erly, that move would alleviate 
a lot of the day-to-day burden 
now on the shoulders of the 
information security staff by 
shifting some of the opera- 
tional and analysis work to se- 
curity operations. That would 
allow us to focus on other se- 
curity decision-making re- 
sponsibilities: architecture, 
engineering, new and emerg- 
ing technologies, policy en- 
forcement and so on. 

This plan is still in its infan- 
cy, and I’m sure there will be 
plenty of discussions around 
general responsibilities as this 
endeavor moves forward. B 


WHAT DO YOU THINK? 

This week's journal is written by a real secu- 
rity manager, “Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 
thurman@yahoo.com, or join the discussion 
in our forum: QuickLink a1590 

To find a complete archive of our 

Security Manager's Journals, go online to 
© computerworld.com/secjournal 
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Security Bookshelf 
§ Network Security Tools, by 
Nitesh Dhanjani and Justin 
Clarke (O'Reilly, 2005). 


This standard secu- 
rity book focuses on 


scribe in detail how to write 
plug-ins for it. From Web as- 
sessment tools to code-review 
utilities, this book is packed 
with solid and meaningful 
explanations, instructions for 
use and additional engineer- 
ing-type information. 

~ Mathias Thurman 


RSA Tool Eases 
App Security 

RSA Security announced RSA 
BSafe Data Security Manager, 
middleware for software de- 
velopers that simplifies and 
strengthens application secu- 
rity by putting security deci- 
sions and design in the hands 
of experts. Using a central- 
ized, policy-based approach, 
RSA BSafe Data Security 
Manager is designed to ensure 
that applications meet busi- 
ness and regulatory require- 
ments for protecting data. 


Cortication 
VeriSign Inc. introduced the 
VeriSign Security Certification 
Program. tt is designed to 
assess an enterprise's infor- 


mation security program and 
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The president 


TECHNOLOGY 


er 


of Xerox’s Innovation 


Group tells how the company is dealing 
witha whole new definition of documents. 


After having reorganized late last year, 
Xerox Corp. is on a roll. The company’s 
profits are up, thanks to rising sales of 
color printers and copiers, as well as a 

new focus on services, which now account for 20% of 

revenue. Hervé Gallaire, Xerox’s chief technology officer 
and president of the Xerox Innovation Group, spoke 
with Computerworld’s Robert L. Mitchell recently 
about research and development projects in the lab, 
real-world applications and whether Xerox’s move 

to services means the company is letting up on its com- 

mitment to hardware R&D. Stamford, Conn.-based 

Xerox registered more than 500 patents in 2004. 


What role does the Innovation Group play at Xerox? The 
technology that feeds into the products — the plat- 
forms that will become products — are being done 
in the Xerox Innovation Group. What we do is not 
just the technology, but also the intellectual property 
management. Our DocuShare product is also hosted 
here. It is a business unit, but Xerox is not a software 
product company, therefore I manage it. 

PARC is a bit special because it used to be an inte- 
gral part of our research and technology organiza- 
tion, but it has been spun off. We have enabled PARC 
to work not just for Xerox but for other partners. 


How has the concept of the document changed, and how has 
Xerox adjusted? [Documents] have nothing to do with 
paper anymore. This is about finding information 
and structuring it inside the document, whether it’s 
paper or electronic, and it’s about connecting the 
document to a workflow. We're still about output, 
still about input, about scanning, about copying — 
but those are just some of the capabilities that need 
to be made available. Your multifunction [copy, print, 
scan, fax] device becomes part of an application. 


What innovations are you working on that are likely to 
appear in products in the next 12 months? One is to use 





a digital camera as a scanner so that when you are 
mobile, you can take images of documents. The 
secret here is to develop software that will enable 
me to clean up all the errors, all the noise that is be- 
ing introduced. The idea is that mobile workers can 
use cameras as scanners that can be introduced into 
normal workflows. This software could be loaded 
on the digital camera itself or as a service on the 
Internet. 

Another example is something we call CopyFinder, 
which uses your multifunction device as a tool to 
search your repository of documents. T’ie concept is 


60 


Ss as 
Xerox Corp., and 
president of the 
Xerox Innova- 
tion Group 


Oversees six of 
Xerox’s research and technology 
organizations, including its intel- 
lectual property unit, its Docu- 
Share document management 
software business and Gyricon 
LLC, a start-up that manufactures 
e-paper displays. 
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you might have this document but you don’t have 
much information that says where the source file is. 
So how do I find that? I could use my search tool and 
type a couple of keywords, but I’ll probably find lots 
more answers than I care to find. What we do in- 
stead is use the source page and do a scan. We ana- 
lyze enough of the text to be pretty sure that we can 
find a document that has a very high similarity to 
this. We see that as a fairly effective way of doing 
search for certain types of applications. 


What other technologies are you working on that may have a 
big impact? We have now an image classifier, a mathe- 
matical algorithm that tries to find points that can be 
used to categorize the image and distinguish it from 
something else. You could then combine this capabil- 
ity to search on text and on images, [but] it’s only a 
categorizer at this time. 


What are you doing in the area of document security? The 
GlossMark technology is one where we print some- 
thing you can see. If you copy it, the GlossMark will 
not be copied. So the copy is not the same as the 
original. The GlossMark is a way to use the toner to 
create an image that’s visible given certain light char- 
acteristics. If I move the document under a light, I 
will see an image appear, and if I move it to a differ- 
ent position, it disappears. But it’s not an absolute 
security, in a sense, because it’s visible. 


Xerox has been an innovator in the color printer market. 
What will users see in terms of cost and capabilities in the 
next year? Cheaper, faster, maybe higher quality. I 
don’t know if you will have [them] all at the same 
time. You can almost determine the cost of a product 
by putting it on a scale. We have these curves that 
show the correlation between weight and cost. That 


| means technically that we need to replace a lot of 


the heavy metal and plastic with more electronics, 
putting more smarts inside. 


Xerox has repositioned itself from a hardware-focused com- 
pany to a services-focused company. What does this mean 
for Xerox in terms of its role as a technology innovator? 
About 20% of revenues are coming from services 
now. Xerox today spends about $850 million [on re- 
search and development]. Out of that, research on 
technology is about $150 million [including the PARC 
spin-off], and inside that, I spend one-third on the 
software and services side, one-third on the imaging 
side and one-third on the hardware. I don’t believe 
that we will decrease the hardware [spending], at 
least for the next few years. 


Xerox and PARC are renowned for developing key elements 
of IT infrastructure that other companies capitalized on. Is 
Xerox better prepared today to exploit its own innovations? 
One of the mechanisms we put in place is the Inno- 
vation Group. We have responsibility for both the 
creation of the technology and the exploitation of the 
technology. What we have done by putting the two 
together is to make sure somebody would watch tech- 
nology and, when it is not used by Xerox, to try and 
decide how to capitalize on it in the best possible way. 
Xerox cannot exploit everything, so you need alter- 
nate mechanisms. We have very impressive licens- 
ing. We want to license it if we don’t use it. @ 54751 
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AppiQ Announces 
Storage App Suite 


® ApplQ Inc. in Burlington, Mass., 
announced StorageAuthority 
Suite R4.0. The storage-area net- 
work management and storage 
resource management software 
allows for centralized control of 
heterogeneous storage infrastruc- 
tures, according to AppiQ. The 
suite centrally manages distrib- 
uted Network Appliance Inc. net- 
work-attached storage filers, fully 
integrates backup reporting and 
fault analysis for Veritas Software 
Corp.’s NetBackup, and works 
with IBM TotalStorage Enterprise 
Storage Server. Pricing depends 
on the module of the suite being 
purchased and customer needs. 


Peregrine Updates 
BI Analytics Tool 


® San Diego-based Peregrine 
Systems Inc. has announced BI 
Portal 5.2. The predictive analy- 
sis tool is aimed at helping IT 
managers make better decisions 
around the financial management 
of their IT assets, Peregrine says. 
The portal, which runs on Win- 
dows Server 2000 and 2003, 
IBM AIX and Sun Solaris, pulls 
data from Peregrine’s Service- 
Center and AssetCenter software 
systems. BI Portal 5.2 starts at 
$7,000 for a five-person pack- 
age, or $1,400 per user. 


Centennial Releases 
IT Asset Manager 


@ Centennial Software Ltd., a 
Portland, Ore.-based developer of 
IT asset discovery and security 
management systems, has re- 
leased its Discovery 2005 net- 
work-inventory and IT asset man- 
agement software. New features 
include user-configurable dash- 
boards for key audit data analy- 
sis, a portal that provides access 
to software licensing information, 
and other updates that help pro- 
vide full visibility of all network 
assets, according to the compa- 
ny. The software will begin ship- 
ping next month and will be 
priced starting at $22 per seat. 
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CURT A. MONASH 


HE ADVANCE OF analytic technology 

is hindered by a collective software 

industry blind spot: There is no clear, 

convincing vision of the future of analytic 

application development tools. This 
makes it hard for enterprises to firm up their analytic 


technology strategies. 


Fortunately, there are 
work-arounds to this prob- 
lem. But before discussing 
them, here’s a quick review 
of how the industry got it- 
self into this bind in the 
first place. (For more his- 
torical detail, see my new 
blog, specifically the post 
www.computerworld.com/ 
blogs/node/280.) 

Confusingly, query/ 
analysis/ad hoc reporting 
products for the most part 
are application development tools. We 
speak, and rightly so, of business intel- 
ligence tools being used to create (and 
deploy) departmental BI applications. 
Enterprise reporting products are also 
app dev tools — just think of how 
many application software vendors re- 
sell Crystal Reports. And more spe- 
cialized analytic tools — such as sta- 
tistical or simulation packages — gen- 
erally have custom programming lan- 
guages at their core. 

Nonetheless, in recent years BI ven- 
dors have collectively taken their eyes 
off the app dev ball. The reason is 
twofold. First, BI products may oper- 
ate like app dev tools, but they are 
generally sold like actual applications. 
A few years ago, BI vendors decided 
that applications had higher price 
points than dev tools and explicitly 
emphasized the “application” aspect 
of their offerings. Second, the BI 
industry has even more recently refo- 
cused on system software — but the 





emphasis has been almost 
entirely on grand integrat- 
ed enterprise analytics 
servers, not on the tools 
that make them useful. 
Thus, some interesting 
analytic app dev products 
have fallen between the 
cracks. For example, Cog- 
nos had an app dev lead in 
Metrics Manager, while 
Business Objects had some 
interesting pieces in the 
oddly named Application 
Foundation. However, as far as I can 
tell, neither capability has been signifi- 
cantly advanced in several years. Nor 
has Oracle’s BI Beans amounted to 
much. And the same goes for most of 
the rest of the BI industry. 

There are two exceptions to these 
trends that spring to mind. One is en- 
terprise information integration, or 
EII, when it morphs all the way into 
composite apps. The other is SAP’s 
xApps, coincidentally also a compos- 
ite apps strategy. I say “coincidentally” 
because the composite apps aspect of 
EII involves knitting technical proc- 
esses such as Web services together, 
while the composite apps aspect of 
SAP’s strategy is focused on the busi- 
ness process side. 

But when combined, these exam- 
ples suggest that if and when good 
analytic app dev tools finally come 
together, there will be a strong com- 
posite apps flavor. There almost has 
to be: Analytic/BI user interfaces 
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gor Analytic 
ev Tools 


need to be flexible, so conventional 
application generation wouldn’t work. 

There’s also another piece to the 
story. For the past 15 to 20 years — i.e., 
the entire BI era, and probably the 
executive information systems era as 
well — the fundamental BI app dev 
paradigm has been declarative rather 
than procedural. This has been true on 
both the data access and user interface 
sides, and that’s pretty much all there’s 
been to the apps, some simple arith- 
metic for calculated fields excepted. 

Well, calculated fields begat key per- 
formance indicators (KPI), and now 
there’s a lot of them. A whole lot. A 
hard-to-manage whole lot. Don’t be- 
lieve people who say that the right 
number of KPIs for an enterprise is 
seven; 700 often isn’t enough. Seven 
may be enough for one person in an 
enterprise, or all of one person’s direct 
reports, but I question even that. At 
every level of the organization, and in 
every department and subdepartment, 
the appropriate KPIs are different. 
And yet another level of complication 
is the need for alerts associated with 
all those KPIs. Ultimately, the BI ven- 
dor with the best app dev capability 
may be the one that makes this KPI ex- 
plosion easiest to manage. 

The best work-around I can think of 
for the lack of tools (other than just 
sticking with packaged apps, which 
aren’t far enough along for that to be a 
good idea) is modularization — decid- 
ing that transactions are transactions, 
analytics are analytics, and the way to 
knit them together is via composite 
app dev tools. This still leaves an an- 
noying problem with KPI manage- 
ment, but you'll just have to grin and 
bear with that part until the entire BI 
industry gets its act together. @ 54882 
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&A 
Get Ready: The Rules Are Changing 


T 
| 
| 
When business processes become com- | 
modities, all the rules change, says Babson | 
College researcher Thomas Davenport. | 
Here’s what CIOs need to do about it. | 


Page 38 
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HOW BAPTIST MEDICAL CENTER SOUTH 
BUILT AN ALL-ELECTRONIC ENVIRONMENT WHILE BIGGER, 
MORE PRESTIGIOUS HOSPITALS FAILED. BY JULIA KING 


Career Watch 

There’s a new title on the rise in corporate 
IT: senior VP for data management. Plus, 
a survey reveals that Silicon Valley’s top 
execs are still getting huge pay increases, 
and we look at the behavioral differences 
between CIOs and CEOs. Page 42 


OPINION 

Business Cases: 

What, Why and How 

If your IT priorities aren’t based on 
business cases, you’re shooting in the 
dark, says Bart Perkins. Here’s why you 
need to build them and how. Page 43 


< | = perience working in a totally electron- 


OUR Cam ire mam OR esl Me RITE eC 


ESS THAN TWO YEARS AGO, 
cows grazed on the Jackson- 
ville, Fla., site of Baptist Med- 
ical Center South (BMCS). 
Today, physicians at the brand- 


new hospital make their rounds | 
toting wireless devices to check | 


lab results, view X-rays, update charts, 
order prescriptions and send and re- 
ceive e-mail. 

At bedsides, nurses use wireless de- 
vices on wheels, or WOWs, to record 
progress notes and check doctors’ or- 
ders. If they administer medicine or 
change a bandage, the supplies they 
use are electronically tracked and 
matched by bar code to individual pa- 
tient records, enabling more accurate 


patient billing and automatic inventory | 


replenishment. 
What’s conspicuously absent every- 


where is paper. And for a busy hospital | 


whose staff has just a few weeks of ex- 


| 


= ic environment, the overall atmos- 

: phere is strikingly tranquil. The doc- 

< tors and nurses seem completely con- 
s fident and competent in their new dig- 
2 ital workplace. 

Yet digital by no means equals im- 
presonal. Original artwork graces the 
walls, waiting rooms have the cozy feel 
of a private library, and lots of win- 
dows look out on the hospital’s well- 
tended gardens. 

You have to wonder: How did this 
small, 92-bed community hospital 
manage to succeed where larger and 
more prestigious hospitals have failed? 

For example, Cedars-Sinai Medical 
Center in Los Angeles pulled the plug 
on its $34 million electronic medical 
record (EMR) system after just three 
months in 2002 because staffers re- 
fused to use it. Nationwide, only about 
6% of hospitals have computerized 
systems for doctors’ orders. 

“Tt’s all about changing the culture,” 
says BMCS CIO Roland Garcia. 


Seize the Day 


From the beginning, Garcia says, he 
and other hospital executives realized 
that they had a unique opportunity to 
build not just a new hospital, but an 
entirely new culture and health care 
delivery model that relies heavily on 
technology to enhance patient care 
and safety. 

To seize that opportunity, they first 
had to secure the buy-in of the area’s 
independent physicians, who have a 
choice of where to practice. 

Before the ground had been broken, 
BMCS recruited a physician advisory 
board, which worked with cross-func- 
tional IT and operations teams on vir- 
tually every aspect of the hospital proj- 
ect, from choosing which technology 
to use to conducting exhaustive simu- 
lation testing in the months before the 
hospital opened on Feb. 16. 

The teams spent months parsing the 
thousands of steps and processes in- 
volved in treating patients. Everything 
was dissected, from patient scheduling 
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and clinical procedures to discharge 
and billing. 

Ordering and filling a prescription, 
for example, involves 148 discrete steps 
carried out by different people and de- 
partments, notes chief medical officer 
Dr. Keith Stein, the project’s executive 
champion. 

The challenge was streamlining 
those steps and then accurately map- 
ping the best possible process into the 
hospital’s EMR software, which is from 
Kansas City, Mo.-based Cerner Corp. 

That’s where BMCS'’s clinical infor- 
matics team comes in. Headed by Trish 
Gallagher, a registered nurse, the 10- 
person informatics group is composed 
of technology-savvy clinicians. From 
the beginning, they worked side by 
side with about 65 programmer/ 
analysts and a core group of physi- 
cians, nurses, dieticians, physical ther- 
apists and other clinical and ancillary 
personnel to define and refine each 
and every process before it became 
part of the computerized system. 

“Every week, we had two-hour 
meetings where we focused on two 
things: our culture and the [user] expe- 
rience,” says Gallagher. “We wanted to 
improve current pitfalls [in processes 
at other Baptist facilities] and find out 
exactly what users wanted to see in 
the system.” 

Senior project manager Serrine 
Dully describes the informatics team 

as “middie-ground translators.” 


“They communicate physicians’ and 
nurses’ needs to IT programmers,” she 
says, and that translation makes all the 
difference. “You cannot send a pro- 
grammer to a physician or nurse and 
have this kind of outcome.” 

One of the biggest challenges, Dully 
says, was getting clinicians to break 
away from thinking about the way they 
had always done things in the past. 
“We started every one of our meetings 


Managing the Project 


with a speech in which we basically 
told them we wanted them to think 
outside the box and ask themselves if 
they had every opportunity, how 
would they do things differently,” says 
Dully. “We never quit hearing, ‘But 
we've always done it this way.’ But 
eventually, we heard it less and less.” 


Customized Care 


The informatics group and IT are also 
working with physicians to develop 
“care sets” within the system. Care sets 
are groups of specific procedures, tests 
and medications that an individual 
physician may use to treat a certain 
condition or illness, such as pneumonia. 

Rather than separately ordering 
blood tests, X-rays and other lab work, 
the physician can simply order the 
care set that he has customized in the 
system. 

“Care sets make things easy,” notes 
Jim Altomare, a physician at BMCS. 
“You can also build your own care sets 
using templates.” 

He explains the lure of developing 
personalized care sets this way: “I 
want to do my patient care. I don’t 
want to learn a new system.” 

Physicians also have wireless access 
to external sources of medical infor- 
mation as well as full X-ray images, 
which enhances patient care, accord- 
ing to Stein. 

“With built-in links to evidence- 
based medicine, if you’re at an impasse 
in your treatment, you can go out on 
the Internet and get more informa- 
tion,” he notes. 

Altomare recalls a situation in which 








he was able to convince a recalcitrant 
elderly patient that she had a case of 
pneumonia that required in-hospital 
care. He pulled up an X-ray of her lung 
on his wireless device, and seeing the 
X-ray then and there convinced the pa- 
tient; she agreed to be admitted for 
treatment. 

Having wireless access to previous 
test results in a fully electronic med- 
ical record is especially valuable to 
doctors in the emergency room, says 
physician Ted Glasser. “Having all of 
that information helps you make an 
evaluation on the spot,” he says. “Ei- 
ther send a person home because what 
you're seeing doesn’t represent a dif- 
ference from their previous health 
state, or — if it represents a big differ- 
ence — act aggressively.” 

The system also creates an ID and 
time stamp each time a record is ac- 
cessed or a process is completed, 
building an ongoing electronic history 
and timeline. This helps with insur- 
ance and regulatory compliance re- 
quirements. And ultimately, it also 
helps deliver better patient care, ac- 
cording to Garcia. 

“Capturing and time-stamping infor- 
mation allows us to come back and do 
analyses and see where we can make 
improvements,” he notes. 

Garcia says that all of this informa- 
tion saves time, whether it’s time spent 
looking for X-rays or tracking lab re- 
sults. “If the technology can reduce 
hours from ordering meds or complet- 
ing blood work,” he says, “it all goes di- 
rectly to improving patient care, which 
is why we are here.” @ 54692 


Cerner software, the SMS schedul- 
ing system [from Shared Medical 
Systems Corp.] or some piece of 
departmental software,” Corrigan 


ENABLING CLINICIANS to read 
X-rays, write pharmacy orders, or- 
der lab tests and review a patient's 
medical history all from a single 
wireless device required more than 
a cultural shift at BMCS. For IT, it in- 
volved integrating no fewer than 
100 different departmental software 
applications and configuring the 
main electronic medical record 
system software. It also involved 
months of integrated testing and 
then more months of simulation 
training. All the while, the hospital's 
opening date of Feb. 16, 2005, re- 
mained firm. 

The hospital's 30-person clinical 
implementation team accomplished 


1 itall on time and on budget by fol- 

; lowing a course of action that proj- 

4 ect manager and IS director Mary 

1 Pat Corrigan refers to as “totally 

! backward project management.” 
“We had a date when the build- 

1 ing was to open, a date it would be 

1 built, and we went backward from 

4 those dates,” she says. “It was all 

§ about firmly establishing major key 

: dates upfront, whether people 

« thought they were achievable or 

: not, and then managing to those 

4 dates.” 

1 “Wealso made decisions rapid- 

: ly,” notes Mike Robin, |S program 

4 Manager. It helped that the imple- 

1 mentation team - composed of 


both IT and clinical personnel - had 
a strict escalation process for prob- 


lems and disagreements. 

“If there was a [software config- 
uration] decision that changed the 
workflow, it would go to the IT ar- 

§ chitecture group and to the clinical 
! people and then come back down 


; to us,” Robin says. “If a change af- 


1 fected physicians, it would go to the 


; physicians’ advisory board.” 
4 Allproblems were logged in an 


! Excel spreadsheet, and key delivery 


| dates were tracked using a simple 
4 electronic dashboard approach. 
1 “We were relatively dictatorial 
4_ that every issue go into the data- 
4 base, whether it was about the 


recalls. “We always ended our 
meetings by asking ourselves what 
we weren't thinking about, where 
there might be holes.” 
were answered by clinicians like 
Linda DeVero and Bonnie Williams, 
both registered nurses in the infor- 
matics group who were part of the 
software implementation team. 

“They were very good at recog- 
nizing the downstream impact of 
any changes” in the software and 
workflow, notes Corrigan. The bot- 
tom line, she says, is that “IT drove 
the implementation, but the clini- 
cians drove all the decisions.” 

~ Julia King 
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REAby:A ne Rules 
Are Changing 


Business processes are becoming 
commodities, and IT is leading the way. 


When business process- 
es become commodities, 
all the rules change in 
ways that can revolu- 
tionize business, says 
Thomas Davenport. In this 
month’s Harvard Busi- 
ness Review, Daven- 
port, academic director 
of the Process Manage- 
ment Research Center at Babson College 
in Wellesley, Mass., lays out his reasons 
for believing that those changes are be- 
ginning to happen. He told Computer- 
world’s Kathleen Melymuka what he 
thinks business process commoditiza- 
tion will mean to business and IT. 


Let’s start with the basics: What is a busi- 
ness process? It’s an abstraction — a 
series of pictures or words or diagrams 
that describe the way a particular 
piece of work is supposed to be ac- 
complished. It could have a greater or 
lesser degree of connection to the way 
work is actually done. 


What's the value of standard business 
processes to business and IT? For virtually 
anybody, a standard process can be a 
starting point — a point of departure 
from which to design a new process. 
When people are designing organiza- 
tional charts, they often look at other 
organizational charts. 

It also simplifies the commodity 
stuff that people do. There are so 
many processes in an organization 
that don’t confer any competitive ad- 
vantage, and doing them in an innova- 
tive way wouldn’t make much differ- 
ence to revenues or profits. So you 
might as well do them in a standard 
way. And application packages all as- 
sume some sort of process by which 
they’re used. 


What sorts of revolutionary changes do you 


foresee if standard processes are adopted in 
a big way? Over the years, I’ve seen this 
whole idea of business process out- 
sourcing become popular, [but] there 
is really no basis for choosing to con- 
tract with external suppliers. You can 
turn accounts payable over to an out- 
sourcer, but you have no indication 
that the outsourcer can do better — no 
objective measure except how shiny 
the consultant’s shoes were. So it often 
comes down to cost. 

If you could decide with some confi- 
dence that someone could do better 
than you could, that would be a big im- 
petus for the whole idea that we are 
going to do only those things we think 
are distinctive and let others do the 
rest. Disaggregating the company into 
commodity and distinctive activities 
could be greatly accelerated if process 
standards took off. 


And you see this beginning to happen? 
There are these really cheap resources 
available in places like India, and we 
have a process standard in CMM [the 
Capability Maturity Model] that says, 
“People can do this as well over there 
— if not better — than people here.” 
CMM isn’t a perfect standard, but it’s 
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certainly decent. That gave people a 
lot more trust that they could hire 
someone they may have never seen to 
do work, so that’s starting to happen, 
but it’s not as far along in some other 
business process areas. 


You talk a lot about CMM. Why do you think 
it has been so successful? The govern- 
ment had a lot to do with it. For any of 
these standards to take off, you need a 
bunch of people getting together to 
agree, or you need one big 800-pound 
gorilla to say, “If you want to do busi- 
ness with us, here’s how you'll do it.” 
In the case of CMM, the government 
said, “If you're going to write code for 
us, you have to be Level 3,” and that 
provoked a host of systems integrators, 
both here and around the world, to 
move in that direction. 

The simplicity of it is another rea- 
son. When people try to develop a 
standard, they often get very complex 
about it. But the simplicity of Level 1 
to Level 5 was very appealing. And the 
fact that it had a group like the Soft- 
ware Engineering Institute — people 
could get together and talk about how 
to implement CMM, so it became a lit- 
tle social movement. 


Here are three kinds of evolving process standards and how they apply to business: 


STANDARD | WHAT IT DESCRIBES 


Se 
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Some standards - such as the ISO standards 
in manufacturing - have been around since 


| the 1940s. Why, after all these decades of 


work on standards, do you think we're ap- 
proaching some sort of critical mass of 
adoption? There are all these potential 
providers of services where you can 
save a lot of money, so the need for 
standards is higher. And there’s more 
electronic interchange between com- 


| panies than there has ever been, and 


things like XML have made it some- 
what easier to agree on how people 
will exchange information in these 
standard process environments. 


How soon will this happen? Everybody al- 
ways thinks things will be revolution- 
ary, and it turns out to be evolutionary 
because it takes so long to agree on 
things. And there’s a natural tendency 
to go slowly on process standards be- 
cause if you can maintain some com- 
petitive advantage by your process, you 
want to do that until your customers 
and suppliers force you to standardize 
it. It’s happening faster in some areas 
than others. Certainly, supply chain has 
taken off pretty dramatically. The 
CMM stuff is going great guns, and also 
I’ve heard in the past year that 20 or so 
organizations are doing stuff with ITIL 
{I Infrastructure Library], which is a 
process model for IT. 


if 'm a ClO, what should | be doing about ali 
this? Since IT is probably the most ad- 
vanced of the business processes to 
use standards, you should be thinking 
about ITIL and CMM and other per- 
formance standards to see what makes 
sense for you to adopt within your 
own shop. Then, since a lot of systems 
relate to areas where there are already 
pretty well-developed process stan- 
dards, like SCOR [Supply-Chain Oper- 
ations Reference Model] and ISO 
9000, you ought to be familiar with 
how your processes relate to those and 
what that means to how you relate to 
your software vendors. Is there a stan- 
dard in your industry for how you do 
basic activities? If not, does it make 
sense to start developing one? So there 
are a lot of things CIOs need to be 
thinking about and acting upon. 

@ 54698 


This is the latest in a series of monthly discus- 
sions with Harvard Business Review authors 
on topics of interest to IT managers. 


For a closer look at the SCOR supply chain standard, 
visit our Web site: 
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Got Questions About 
Enterprise Analytics? 


Computerworld’s IT Management Summit Has the Answers 


Looking to better understand enterprise 
analytics? Apply to attend Computerworld’s 
complimentary” half-day IT Management 
Summit: Beyond Business Intelligence. 


Enterprise analytics enable companies to 
make timely fact-based decisions using 
critical information from across the entire 
organization. By fully leveraging data, 
technology, skills and processes, successful 
users of enterprise analytics go beyond 
simply understanding the past, to predicting 
outcomes that improve overall corporate 
performance. 


This summit will feature the latest insights 
of business intelligence industry experts and 
will give you first-hand information on the 
innovations and experiences of companies 
successfully deploying enterprise analytics. 


Apply for registration today 
Contact Chris Leger at 888-299-0155 


or visit: www.itmanagementsummit.com 


This program will also take place in: 
Washington, D.C. + July 12, 2005 

Chicago, Illinois - July 26, 2005 

New York, New York - August 9, 2005 


San Francisco, California - September 20, 2005 


Beyond Business Intelligence: 
Using Enterprise Analytics to Drive 
Fact-Based Decisions 

Newton, Massachusetts - June 28, 2005 
Boston Marriott Newton - 2345 Commonwealth Avenue 


7:45am to 8:15am 


Registration and Networking Breakfast 
8 15an + 


Introduction and Overview 


Trends in Enterprise Analytics 


Case Study: The Nature Conservancy 
How Technology is Transforming 
Business Intelligence 


anager 


Refreshment and Networking Break 


Case Study: Niis/APEX Group Holdings 


EX Group H 


Panel Discussion - From Gut Feel to Fact-Based 
Decisions: Reai-Life Business, Political and 


Technology Lessons Learned on the Front Lines of 


Enterprise Analytics 


Program Concludes 


Exclusively sponsored by 
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Director of Business 
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What-tt Really 


Means 


Here’s how to tell if your IT group is 


really aligned with your business - and | 


what to do if it’s not. By Troy D. Kinsey 


IT DEPARTMENTS are often perceived to 
be ineffectual, slow to respond to busi- 
ness needs and even an encumbrance to 
corporate progress. Many CIOs believe 
that their IT departments are aligned 
with the business, but I’ve seen only a 
few companies actually achieve this and 
have the bottom-line results to prove it. 
A 2004 survey by CIO maga- 2 
zine showed that while 80% of iH M 
IT senior managers believe that = Y 
IT and business are aligned, only 30% 
of business senior managers agree. 
Let’s look at how to determine 
whether your IT group really is aligned 
and how to achieve alignment if it’s not. 
My experience in leading both oper- 
ations and IT departments has con- 
vinced me that it makes sense to look 


ils 


| at three areas: process, metrics and 
| employee development. 

Process: Have you established a cross- 
departmental process for prioritizing, 
approving and implementing those 

| projects that add sufficient value to the 

| business? Do you ensure that both IT 
and business are engaged throughout 

re the entire project life cycle? 

| ' OR Involving IT throughout 

week the life cycle of a business 
project can greatly increase the breadth 
and diversity of creative business solu- 
tions; ensure the consistent use of 
corporate systems, infrastructure 
and support services; and leverage 
economies of scale. As my colleague 
Galina Cherny, senior director of IT at 

| Universal Studios, notes, “The desired 
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functionality quite often already exists 
in some form elsewhere in the compa- 
ny, or there are other business units who 

would benefit from the same solution.” 

But leveraging IT across business 
units works only when IT understands 
business operations and challenges. 
For that to happen, IT and business 
have to work as a team. 

Metrics: Do you integrate IT and 
business objectives and measurements 
of success? Do you use incentive pro- 
grams that incorporate these integrat- 
ed objectives? 

IT departments are typically mea- 
sured and compensated based upon 
systemwide stability and problem- 
resolution response times. Business 
units are generally rewarded for adapt 
ing and responding to ever-changing 
customer needs. Because these goals 
conflict, departments’ actions tend to 
conflict with one another. In addition, 
incurring technology infrastructure 
costs without agreeing upon a set of 
business metrics leads to mushy IT 
decision-making and corporate waste. 
The solution is to establish a consis- 
tent set of standards for measuring re- 
turn on investment. 

Employee development: Does your com- 
pany have cross-departmental training 
and mentorship programs that enable 
IT personnel to understand the daily 
operational challenges and needs of the 
business and external customers? To 
keep IT integrated, IT staffers should 
be a part of the problem-solving team 
whenever the business faces a challenge. 


How to Align 

If the alignment between IT and the 
business falls short in your company, 
here are some tactics to improve it: 

Increase the level of understanding between 
IT and the business. Any activity that in- 
creases communication between the two 
groups is a good starting point. Have IT 
employees spend time sitting alongside 
business employees as they work. At the 
executive level, the CIO should meet fre- 
quently with each of the business unit 
executives to learn more about the 
challenges that they face. 

Develop a consistent strategy for prioritiz- 
ing projects. Have each business unit 
agree on a strategy for prioritizing 
projects across all business units, and 
post an agreed-upon and prioritized 
calendar of all projects. That nails 
down priorities and commitments 
while increasing understanding of 
resources-to-projects constraints. 

A caveat: All business units must 
agree not to establish renegade IT 
departments. I have seen more than 
one business executive effectively 





alienate the entire IT department by 
insisting that it support software that it 
played no role in developing. 

Integrate IT and the business into a single 
project life cycle. Consistent improvement 
in merging business process re-engi- 
neering with technology happens only 
when you leverage the skills and expe- 
rience of both areas. The alignment of 
goals, processes and incentives should 
apply to project managers, developers 
and users, including corporate man- 
agement. Establishing a cross-depart- 
mental oversight committee or project 
management office can help project 
teams traverse political hurdles and 
engineer business change. 

Establish a consistent cross-departmental 
incentive system. Some companies are so 
successful that they move their IT de- 
partments from cost centers to profit 
centers. They do so, in part, by ensuring 
that development projects tie directly 
back to measurable business goals. 
Project teams must continually ask and 
answer two questions: “Which business 
problem are we trying to solve?” and 
“How are we going to measure our so- 
lution’s impact on this problem?” In my 
experience, these two questions are not 
asked often enough or with sufficient 
objectivity. Companies that ask these 
questions can then create and measure 
cross-functional (IT and business) 
projects based on standard bottom-line 
criteria. This upfront investment in 
clarifying common measurements of 
success focuses everyone’s efforts on 
tangible business problems instead 
of technology or process agendas. 

Strategic IT management is critical to 
the success of most businesses. The de- 
pressed and turbulent conditions of the 
past several years have left many compa- 
nies with decreased staff levels, unfin- 
ished projects and ever-increasing cus- 
tomer demand. This is an ideal time for 
corporations to align IT and business 
priorities, consolidate strategic IT op- 
erations and standardize project devel- 
opment methodologies. In other words, 
it’s time to reposition IT as a strategic 
value-add to the business. @ 54696 





Kinsey has more than 15 years of soft- 
ware engineering management experi- 
ence in a variety of industries. He teach- 
es Internet business and technology at 
the University of California, Berkeley, 
and project management for the opera- 
tional management department at the 
University of Southern California. 


WHY APMO? 


APMO can help you align your IT group. See how: 


QuickLink 54697 
www.computerworld.com 
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You have to print. 


Meanwhile, your printer is having a breakdown. 


(isn’t it time for a printer you can rely on?) 


| 


: 
a : 
ae _** You can’t afford not to buy an HP printer. ses 
HP. Officejet 9110 All-in-One mes (a Pee ache elec 
¢ Print and copy speed: up to. 25 ppm black, erase al ROWAN ume ecm Ee sunee os ¢ Print and copy.speed: up to 23 ppm black, 
22 ppm color ¢ Resolution: up to 4800 x 1200 dpi with ices enna) ols 


¢ Print resolution; up to 4800 x 1200 dpi optimized 
¢ RAM: 128MB std., 384MB max. 

¢ Scan resolution: up to 2400 dpi optical 
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¢ Print resolution: up.to 4800 x 1200 dpi optimized 

¢ Scan resolution: up to 19,200 dpi enhanced and 
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Carlee mee eke acl 

Casters i ef Come) on Ok toe a 
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After 20+ years in the business, HP printers and All-in-Ones are the gold-standard for reliability. In fact, 
PC Magazine awarded HP. their Reader's Choice Award for outstanding service and reliability for the 13th 
straight year. And that’s just one of the many reasons to trust HP to save you now and for years to come. Get the 
The Right Technology. Right Away. 


CDW.tom * 800.399.4CDW 
In Canada, call-800:387.2173 * CDW.ca 
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Despite the struggles still afflicting the median was $758,520. The paper in- 
high-tech economy, top executives in | cluded salary, bonuses and stock-option 
California's Silicon Valley were com- _—_ gains among the factors in its rankings, 
pensated last year at levels nearly even # with stock options accounting for most 
with those at the height of the loot. At the top of 
of the Internet boom, the list was Yahoo inc. 
according to a survey Fi , CEO Terry Seme!, whose 
conducted by the San " 8 z= $230.6 million in com- 
Jose Morcury News. MA MGR) QT BEA TBI pensation ast year was 
According to the sur- [i 1 ‘ all Se the third-highest yearly 
vey of 728 Valley exec- | 1e Va ea pay package in the 
utives, their pay rose - region's history. 

57% in 2004 to a collective $2.1 bil- 4 | Meanwhile, Joint Venture: Silicon 
lion, not far below the 1999 peak of | Valley Network reported that average 
$2.3 billion. Average pay for those ex- 4 pay for workers in the Valley declined 
ecutives was $2.9 million, and the I by 1%. 


# Both ClOs and CEOs demonstrate 
an open, outgoing leadership style that 
enables them to engage with others on 
their terms. 

= By instinct and by training, CEOs 
focus on strategic issues, demonstrat- 
ing a strong focus on action and mak- 
ing decisions quickly with a low likeli- 
hood of changing their minds. CEOs 
are more likely to steer than to adapt. 
ClOs, on the other hand, tend to experi- 
ence less control over situations than 
do CEOs, and they are accustomed to 
remaining more analytical and adapt- 
able than their CEO colleagues. 

® CIOs tend to demonstrate less 
tolerance for ambiguity than do CEOs. 
This may stem in part from the need 
to reduce ambiguity in the IT realm 
through technical standards and inte- 
gration of complex IT systems and 
processes. 


CIO to CEO: 
Moving Into the 
Corner Office 


Executive recruiting firm Korn/Ferry 
International has found no hard evi- 
dence of a glass ceiling for ClOs. In- 
stead, writes senior client partner 
Simon Wiggins in an article published 
on Computerworld.com, the rise to the 
position of CEO, as with promotional 
paths to other C-level spots, is based 
on merit, behavioral style and desire. 
But the firm's research - using data 
on more than a half-million top execu- 
tives, including nearly 1,500 senior- 
level IT executives - revealed important 
differences, as well as similarities, 

in the ways in which ClOs and CEOs 
approach critical leadership issues. 
Among the findings reported by 
Wiggins: 


» The full article can be read 
online at QuickLink 54265. 
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& Over the past few 
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FF ML MESO) 
ducted five searches for executives 
to fill a new title at large compa- 
nies: senior vice president of data 
management. Groce spoke with 
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What are the factors prompting compa- 
nies to elevate the role of senior vice 
president of data management? The ex- 
plosion of data is driving data-related man- 
agement roles to a higher level. While | am 
cautious about the specificity of the “SVP of 
data management” title due to differences in 
corporate titles across industries, it is certain 
that corporations are placing greater empha- 
sis on the areas of data storage, data archi- 
tecture, data warehousing and data analytics. 

In the past 12 months, we have seen a 
marked increase of interest in world-class 
talent with expertise in these areas. We have 
conducted a significantly larger number of 
senior-level talent searches in the data space, 
probably as many as we saw in the previous 
five years combined. 

Simply put, data used to be a commodity, 
an underutilized asset, and it came in smaller 
quantities. Today, a company’s critical business 
data is growing exponentially. One 2004 report 
by Teradata found that over half of surveyed ex- 
ecutives said that their company's data doubled 
or tripled over the previous year. Client demands, 
regulatory archiving requirements, storage and 


Using housing and living costs, local salary and 
TOU GI cme ey ate UL OM TTT ea tie 
Salary.com Inc. calculates that these are the five 


cities where workers get the most for their 
paychecks: 
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backup requirements, and duplicative storage 
procedures are all responsible for this. 


What are the salary ranges you're seeing 
for this role? Salaries, of course, depend 
upon the industry and size of the company. 
What is fair to say is that data executive roles 
exist today at a higher level of the organiza- 
tion, and as a result, compensation has in- 
creased. This is a hot area. Professionals who 
were previously buried deeper in the organi- 
zation today are more visible to the CIO and to 
the business. In one case, | can point to a sit- 
uation where data is so important to the com- 
pany that a separate group was created, with 
the data analytics executive on a level com- 
mensurate to the ClO. 


How do these new managers interact 
with top-level IT executives, the ClO and 
business unit leaders? The answer de- 
pends on the specific focus of the role. The 
purer engineering, planning, architecture and 
operations roles are certainly tied more close- 
ly to the CIO than to the business. These ex- 
ecutives typically sit two levels below the CIO, 
reporting to the head of infrastructure. But the 
world-class leaders in this area are all very 
cognizant of their business partners’ needs. 
Data warehousing and analytics executives 
are often hybrids, typically more closely linked 
with the business and often sitting outside the 
CIO's organization. These executives may re- 
port directly to the business. 

As compared to years ago, these execu- 
tives enjoy significantly greater visibility and 
business-impacting responsibility. Think of 
the competitive advantage all companies can 
realize from analyzing data. The ability to col- 
lect data continues to increase. Credit card 
purchases, affinity program tracking, point-of- 
sale systems, pharmaceutical prescription 
tracking, contact center/CRM input and Inter- 
net-traffic monitoring systems are all exam- 
ples of data feeds collected today but likely 
not 10 years ago. The companies best able to 
aggregate, analyze and utilize this data will 
outpace the competition. For this reason. 
companies are searching for the people who 
can turn this vision into a reality. @ 54365 
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QUICK HITS 


IT Metrics 
Do you have a formal IT mea- 
surement framework in place? 


No plans at 
this time 


Base: 112 North American companies 


What motivated the 
measurement? 


Base: 11! North American companies 
(multiple responses allowed) 


Who led the measurement effort? 


Other” 
5% 


5% Cross-functional team 8% 
Outside consultant 2% 


Base: 111 North American companies 


What do you measure? 


Base: 11! North American companies 
(multiple responses allowed) 


SOURCE: FORRESTER RESEARCH INC 
CAMBRIDGE, MASS., APRIL 2005 
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BART PERKINS 


Business Cases: 


What, Why and How 


USINESS CASES ARE ESSENTIAL to good 

business decisions and IT success. They 

provide the foundation for informed deci- 

sions about what to fund, what to cut and 

how to set IT priorities. Moreover, they 
help set corporate expectations by accurately stating 
the benefits that will result from new programs. 


Many IT organizations re- 
sist building business cases. 
A familiar excuse is that they 
are just too much work. De- 
veloping and using business 
cases requires significant time 
and effort. Bruce J. Rogow of 
Vivaldi Odyssey and Adviso- 
ry estimates that a compre- 
hensive business case costs 
between one quarter and 
three quarters of 1% of a 
project’s total development 
cost. Although this may 
appear to be expensive, it’s 
much cheaper than taking 
a massive write-off down 
the road. 
Some organizations argue 
that business cases aren’t ap- 
plicable to their industries. In 
fact, business cases are crucial to every 
industry, including government and the 
nonprofit sector. Every organization 
needs a consistent way to evaluate po- 
tential investments on the basis of data 
and reason, rather than on passion alone. 
Business cases come in various shapes 
and sizes. At minimum, an effective busi- 
ness case does the following: 
@ Defines the problem and the pro- 
posed program’s objectives and scope. 
® Describes business and technical as- 
sumptions and alternatives considered. 
@ Provides estimates for resources, 
scheduling and costs. 
@ Describes major development and 
operating risks. 
® Quantifies tangible benefits and de- 
scribes intangible benefits. 
® Predicts financial return. 
Use the following guidelines to get the 
best results from your business cases: 





Establish a template. Every- 
one has a favorite business- 
case format. Unless a single 
corporate-level template is 
mandated, making true ap- 
ples-to-apples comparisons 
becomes difficult, if not 
impossible. 
priately. IT shouldn’t prepare 
a business case by itself. 
The cross-functional team 
should establish the project 
objectives, scope, major as- 
sumptions and risks. The 
executive sponsor must 
quantify the project’s bene- 
fits. Finance should provide 
standard costs for each IT 
activity and resource (pro- 
grammer/hour, gigabyte/ 

month and so on). IT needs to define the 
technical approach, resource require- 
ments, schedule and cost. 

Estimate costs and benefits accurately. 
Accurate estimates depend on thorough 
research, standardized estimating guide- 
lines and a consistent cost structure. At 
one of my client companies, two groups 
calculated hourly rates differently. One 
group simply divided programmer sala- 
ries by 2,080 hours at work per year. The 
second group combined salary, benefits 
and occupancy costs, then divided by 
1,700 productive hours. This resulted in 
a more accurate but much higher figure. 
On the surface, it appeared that the first 
group could deliver its projects less ex- 
pensively, but that was blatantly untrue. 

Centralize the evaluation process. CIOs 
need consensus and support from other 
executives to set IT priorities successfully. 
This must come from one centralized 





executive group. Surprisingly, many 
companies have no such group or, worse 


| yet, have multiple groups with overlap- 
ping or conflicting responsibilities. 


Fund all projects from a single pool of capital. 
Many companies separate IT capital 
from “plant and equipment” capital. 
Sophisticated companies take the share- 
holder’s perspective and allocate invest- 
ments from a single pool of capital, 
forcing IT to compete for funding with 
all other proposed investments. 

Establish monitoring processes. An inter- 
nal audit can provide an objective as- 
sessment of program progress during de- 
velopment and installation. Organiza- 
tions must be willing to cancel programs 
that get too far off-track. 

Demand accountability for benefits. Ensure 
that the promised benefits are realized. 
Benefits are unlikely to be achieved (or 
even monitored) unless an individual 
is held personally responsible. Savvy 
companies link the executive sponsor’s 
annual compensation to achieving the 
promised benefits. 

With comprehensive and accurate 
business cases, your company can make 
informed trade-offs and agree on IT pri- 
orities. Most companies fund all regula- 
tory compliance first. Normally, they 
next fund programs with the highest 
return on invested capital. (There are ex- 
ceptions. Companies occasionally 
choose to fund long-shot, high-risk, high- 
payoff programs. Nonprofit organiza- 
tions may fund programs that further 
their mission even if they increase 
costs.) Companies use different priority- 
setting approaches, but it’s crucial to 
have a consistent and clearly understood 
way to prioritize all proposed invest- 
ments — and then use it faithfully. 

Business cases enable you to compare 
projects objectively, so you can under- 
take them in the order that provides 
the highest benefit to the company. 

Use your business cases to make good 
decisions that will result in corporate 
success. @ 54603 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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INFOTECH CONSULTING, INC. 


Computer Programmers, 
Software Engineers, Database Administrators 
A multi-million dollar software development & consulting firm seeks well- 
qualified IT professionals for analysis, design, development, implementa- 
tion and maintenance of software applications in one or more of the fol- 


lowing 


Computer Programmers/Software Engineers 


Java Technology: 


* OO concepts, Design Patterns, UML, Java, Java beans, EJB, Serve- 
lets, JSP, Struts, JDBC, HTML, Java Scripts, C++, XML, MOM Con- 
cepts using JMS, EAI, Oracle - PL/SQL, Stored Procedures etc., JUnit 
and ANT, Appiication Server - Oracie/IBM/BEA, IDE: Eclips/Jdeveloper 


(WebSphere Studio 
Microsoft Technologies: 


+00 concepts, Design Patterns, DNA, COM/DCOM/COM+/MS/VB, 
ASP, DotNET, C#, VB.NET, ADO.NET, XML, assemblies, Remoting, 
Enterprise Services, XML with MS SQL Server, MOM Concepts using 
MSMO or Biztalk, EAI, Stored Procedures - PL/SQL, T/SQL, NUnit, 


FXCOP, NANT, VisualStudio.NET 


Reporting: 


* Web and Application - Crystal Reports/Crystal Enterprise (Version 9/ 
10) / Actuate Reports / PeopleSoft SQR / Oracle Reports/ Business 
Objects/ Oracle Discoverer / Informatica, Stored Procedures, SQL per- 


formance tuning 
ERP: 


+ Oracle Applications - PL/SQL/Forms/Reports/HTML with knowledge of 
functional modules, Oracle Application Server, Java and JSP, Portai 

+ PeopleSoft - Portal, Meta Data, People Tools, Database programming, 
Java/JSP/Servelets with knowledge of functional modules 


* SAP - Portal, SAP Basis, ABAP, 
with knowledge of functional modules 


Client/Server and Mainframe: 


SP, SAP Application server, J2EE 


+ PB, Power Designer, Oracle Stored procedures in PL/SQL 
* WebSphere MQ and Related Technologies 


+ IBM Mainframe /COBOL/Mapper 


DBA: 


Oracle / DB2 / SQL Server (Application and Production DBA), Knowledge 
of Stored Procedures programming, cursors, external/extended stored 
procedures, XML, Backup and Recovery/Replication, Fault-Tolerance/ 
High Availability Setup - Clustering/Parallel, SQL Performance Tuning, 
Database Modeling - CASE Tools (ERWIN, Designer, Cool: GEN, Ra-tion- 


al Rose), ORDBM 


and ODBMS concepts 


Computer Programmers should have a minimum of bachelor's egree (or 
its functional equivalent) in Computer Science/Quantitative disciplines & 
2+yrs relevant experience. Salary <37k-50k>. Software Engineers should 
have a master's degree (or its functional equivalent) in Computer Science/ 
Quantitative disciplines & 2+yrs relevant experience or bachelor’s degree 
(or its functional equivalent) in Computer Science/Quantitative disciplines 
& 5+yrs relevant experience. Salary <55k-65k>. DBAs should have bach- 
elor's or master's degrees (or functional equivalents) and 2+yrs relevant 
experience. Salary <45k-55k>. Candidates must be willing to travel & 
relocate. Send resume to: Recruitment, Infotech Consulting, Inc., 4750 


Delbrook Rd., Ste. 201, Mechanicsburg, PA 17050; Fax: 717-731-9857 
Email: hr@infotechpa.com 


Visit our website at http: 


IT Consultant (VA): needed 
with MS + 2 yrs of exp or 
BS + 5 yrs of relv. exp. in 
Java tools, Oracle, HTML 
XML, UNIX, Sybase, Web- 


sphere Dreamweaver, 


PowerBuilder, SQL Server. 
EA Server, ERWIN, TOAD 
CITRIX & EAF. Apply to 
Cynergy Systems, Inc 
12040 South Lakes Dr. 
Ste. 170, Reston, VA 
20191 


Sr Prog/Analyst to analyze. 
design, code, implement appis 
using C, C++, VC++, OOA etc: 
develop server appis using 
CORBA, C++ in UNIX; develop 
queries, stored procedures & 
triggers for data manipulation 
interact w/ clients for req. gath- 
ering; coordinate with and test 
team members for code delivery. 
Reg. MS or foreign equiv. in CS 
or Computer Engg. & 1 yr exp.in 
IT. High salary, F/T, Travel 
involved Resumes to HR 
Computech Systems, inc. 3 
BethesdaMetroCenter, Ste700 
Bethesda, MD20814. Job ID 
CTSPA2005 


Sr. Programmer Analyst 
NexGen Technologies seeks 
applicants for the position of 
Sr. Programmer Analyst in 
Westminster, CO. Engage in 
full lifecycle software develop- 
ment of web-based software 
applications using JAVA tech- 
nology on a Unix-Solaris plat- 
form. Requirements for the 
position include master's de- 
gree in computer science or 
equivalent (bachelor's degree 
plus five years progressive 
experience) and working 
knowledge of XML. Respond 
by resume to Shaun Skeldum, 
NexGen Technologies, 1490 
W. 121st Ave., Suite 105, 
Westminster, CO 80234 


www.infotechpa.com 


Programmer Analysts sought on 
an ongoing basis, specializing 
in SAP, Oracle, and other tech- 
nologies and disciplines, to 
develop, create, modify and 
implement computer system 
application software and spe- 
al j utility programs to meet 
client needs. Bachelor's degree 
or foreign or functional equiva- 
lent in related field and relevant 
experience. Excellent benefits 
and salary commensurate with 
experience. Send resume to 
Recruitment Coordinator, Ref 
Code 0302, 4400 Campbells 
Run Road, Pittsburgh, PA 
15205; EEO/AAP/M/F/V/H 


Software Engineers 

Design, develop, modify 
computer, web applica- 
tions & software solutions 


Sr. Level Position : IT Mgr, 
MIS Mgr, needed to plan, 
direct or coordinate activi- 
ties in EDP, IS 


Apply with 2 copies of 
resume to HRD, VSG, Inc 
622 Georges Road Suite 
203 North Brunswick, NJ 
08902 


Management Information 
Systems (MIS) Director: 
Los Angeles, CA. Respon- 
sible for day to day mgmt 
of computer rm & equip- 
ment, hardware and soft- 
ware reqmts of all depts.. 
F/T. Fax Resume to: 
Office Mgr, Jennifer Kay, 
Inc. dba California Waves: 
(323) 233-6057. 


ValueMomentum inc. a software 
development and consulting co- 
mpany is looking for Managers, 
Computers having Master's De- 
gree or equivalent in Computer 
Science, MIS, CIS, Engineering 
(any field), Business, Technolo- 
gy, Mathematics or related fields 
with a minimum of two years of 
experience in information tech- 
nology area. Responsibilities in- 
clude providing training and sup- 
port in the Offshore Project Man- 
agement and Delivery. Manage, 
develop, direct, and coordinate 
offshore and on-site projects in 
Internet, E-Commerce, Intranet, 
QA, Data Warehousing and 
ERP solutions such as, Oracle, 
PeopleSoft, and SAP. Coordin- 
ate progress of work, resolve 
problems, and ensure that stan- 
dards for quality of work are met 
Meet with users to understand 
requirements and determine 
quality of service and identify 
needs. Evaluate new software 
and hardware to determine use- 
fulness and compatibility with 
existing software and hardware 
Evaluate applications and sys- 
tems and assist users to identify 
software and modules for off- 
shore development and man- 
agement. Experience must in- 
volve consulting in Internet, E- 
Commerce, Business Rules, 
and Insurance products. Exper- 
ience and understanding of |SO. 
process and tools like V2E, DIG- 
ITE, & MS-Project is a must 
Ability to manage under diversi- 
fied technologies. Good under- 
standing of Insurance and Fi- 
nance domain is necessary. Will 
provide a competitive salary and 
benefits. 

Please email your resume to 
hr@valuemomentum.com 
or mail to: 

ValueMomentum 
3001 Hadley Road, Unit 8 
South Plainfield, NJ 07080 


Software Engineers : Design 
develop, modify computer. 
web & enterprise applica- 
tions 


Sr. Level Positions : {T Mgr 
needed to plan, direct & coor- 
dinate activities in EDP, IS 
Multiple positions available 


Apply with 2 copies of 
resume to HRD, OrionSoft 
Inc., 1333 Meadowlark Lane 
Suite 207, Kansas City, KS 
66102 


Royal Indemnity dba Royal and 
SunAlliance, based in Madison 
Wi, seeks Lead Designer, 
Developers to work in Madison. 
Lead Designer/Developer re- 
quires bachelor’s degree. Ac- 
ceptable majors include com- 
puter science, engineering or 
reiated field including computer 
applications and mining engi- 
neering. Successful applicants 
will have 2 yrs exp designing 
and developing IBM Mainframe 
client/server and internet/intra- 
net software applications and 
working knowledge of JAVA 
IBM WebSphere Application 
Server and J2EE. Respond by 
resume to Jayne Petruska 
Royal Indemnity, 1224 Deming 
Way, Madison, Wi 53705. 


Senior Systems Programmer, 
Analyst (with M.S. and 1 year 
experience or Bachelors or 
equiv. evaluated degree and 6 
years experience) - Alexandria. 
VA. Job entails and requires 
experience in design and devel- 
opment of applications using 
Oracle, SQL Server, Remedy 
Application, Crystal Report, Cry- 
stal Enterprise. PL/SQL, .Net, 
Adobe Workflow Server, Adobe 
Forms Designer and T-SQL 
Relocation within USA Possible 
Send resume to Vincent Burgher 
Ill, Wymond Associates, LLC., 
5845 Richmond Hwy., Suite 600, 
Alexandria, VA 22303 


ValueMomentum Inc. a software 
development and consulting 
company is looking for Software’ 
Engineers. Applicants will be re- 
sponsible for conducting resear- 
ch, technical requirement collec- 
tion, feasibility analysis, techni- 
cal architecture, technical des- 
ign, coding standards, review 
and best practices to automate 
processing and to improve exist- 
ing computer systems. Analyze 
software requirements to deter- 
mine feasibility of design within 
time and cost constraints. Con- 
sult with hardware engineers 
and other engineering staff to 
evaluate interface between har- 
dware and software and opera- 
tional and performance require- 
ments of overall system. Formu- 
late and design software syst- 
ems using scientific analysis 
and mathematical models to 
predict and measure outcome 
and consequences of design 
Design and develop code using 
COBOL, Natural/ADABAS, DB2, 
REXX, JCL, Unix, C, Oracle, 
ENDEAVOR, CHANGEMAN, Vi- 
sual Source Safe, OS/390, RS 
6000 and ES 9000, Java/J2EE 
Experience of Insurance pack- 
ages like LifePro, & Cyberlife as 
well as in Project Management, 
CMM and ISO process is a 
must. Functional knowledge and 
experience of Insurance and 
Finance domain is necessary. 
Master's or Equivalent in Com- 
puter Science, MIS, CIS, Engin- 
eering (any field), Business 
Technology, Mathematics or re- 
lated fields with a minimum of 
two years of experience in the 
computer related field in the 
above job duties. Will provide a 
competitive salary and benefits. 
Please email your resume to 
valuemomentum.com 
or mail to: ValueMomentum 
3001 Hadley Roa Unit 8 
South Plainfield, NJ 07080 


Software Professionals, 
Software Engrs., Sr. Soft- 
ware Engrs., Programmer 
Analysts, Database An- 
alysts. Immed. FT posi- 
tions avail. in San Jose & 
nationwide in Oracle, De- 
veloper 2000, Java, SQL 
Pro C, HTML, Java Script 
SQL Server & Windows 
Must be willing to travel & 
relocate as req'd. Fax 
resume to 408-324-1023 
Ace Technologies, Inc 


CGT Consulting Inc. 
Database Administrator 


The position requires an MBA 
in Information Management or 
equivalent and 2 years experi- 
ence in modifying existing data- 
bases and database manage- 
ment systems, operations an- 
alysis and troubleshooting 


Fax resumes to Naren Mistry, 
Executive Accounts Manager at 
714-364-9705 or Mail resumes 
to: 18032-C Lemon Drive, Suite 
350, Yorba Linda, CA 92886, 
Attn: Naren Mistry. 


Project Manager (Testing) man- 
age teams to design, develop 
test scripts & perform integra- 
tion, systems, regression, func- 
tional, database testing using 
Win runner, Load runner; guide 
teams to create test plan, cases. 
defect tracking & reporting using 
Test Director; test/evaiuate 
teams. Req. MS in CS or Engg 
(any branch) & 3 yrs in job 
offered or BS or foreign equiv. in 
CS or Engg with 5 yrs of pro- 
gressive exp. in IT. High Salary, 
F/T, Travel Involved. Resumes 
to HR, Computech Systems, 
Inc. 3 BethesdaMetroCenter, 
Ste700, Bethesda, MD20814 
Job IDCTPM2005 
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SENIOR SOFTWARE 
ENGINEER 
Multiple Openings 


Job located in Newark, Dela- 
ware and various unanticipated 
client sites throughout the Unit- 
ed States. Research, analyze, 
design, develop and implement 
software/systems applications in 
a client/server environment; will 
also design, implement and 
maintain various programming 
and operating systems; will work 
independently testing and devel- 
oping software/systems applica- 
tions in accordance with project 
specifications; will oversee sys- 
tems implementation and pre- 
pare project status reports and 
formal presentations as requir- 
ed; will communicate project 
specifications effectively with 
project team. Minimum of a 
Master's Degree or equivalent in 
Computer Science, CIS, Engin- 
eering, Mathematics, Electron- 
ics, Business, Management, 
Technology or a related field re- 
quired; position also requires 
extended travel and/or reioca- 
tion. Five (5) years prior profes- 
sional experience in software 
design and development neces- 
sary. Attractive compensation 
package. Mail resumes to 
American Solutions, Inc., Job 
#SE04, 100 Commerce Drive, 
Suite 103, Newark, DE 19713 


SOFTWARE ENGINEER 
Multiple Openings 

Job located in Newark, Delaware 
and various unanticipated client 
sites throughout the United 
States. Research, analyze, des- 
ign, develop and implement soft. 
ware/systems applications in a 
client/server environment; will al- 
so design, implement and main- 
tain various programming and 
operating systems; will work in a 
team environment testing and 
developing software/systems ap: 
plications a rdance with 
project specifications; will also 
work under the close supervision 
of the project manager. Mini- 
mum of a B 
equivalent in Computer > 
CIS, Engineering, Mathematics 
Electronics, Business, Manage 
ment, Technology or a related 
field required; position also 
requires extended travel and/or 
relocation. One (1) year prior 
professional experience in soft 
ware design and develop nt 
necessary. Attractive comp 
sation package. Mail resumes 

American Solutions, Inc., Job 
#SE01 )0 Commerce Drive. 
Suite 103, Newark, DE 19713. 


Witness Systems, Inc. is seek- 
ing a Program Manager (Com- 
puter Software Engineer) to 
design, develop, and test oper- 
ating systems level software 
compliers, and network distribu- 
tion software for general com- 
puting applications. Must have 
a Bachelor's degree or equiva- 
lent in Management Information 
Systems or a related field plus 2 
years of experience in the posi- 
tion offered or 2 years of experi- 
ence designing software and 
engineering of computer tele- 
phony integrations in a call cen- 
ter environment. Salary and 
benefits commensurate with 
experience. Send cover letter 
and resume to Lisa Franck, H.R 
Manager, Witness Systems 
Inc., 300 Colonial Center Park- 
way, Roswell, GA 30076. 


SOFTWARE ENGINEER 
Multiple Openings 


Job located in Newark, Dela- 
ware and various unanticipated 
client sites throughout the 
United States. Research, ana- 
lyze, design, develop and im- 
plement software/systems ap- 
plications in a client/server en- 
vironment; will also design, 
implement and maintain vari- 
ous programming and operat- 
ing systems; will work indepen- 
dently testing and developing 
software/systems applications: 
in accordance with project spe- 
cifications; will oversee sys- 
tems implementation and pre- 
pare project status reports and 
formal presentations as re- 
quired; will communicate pro- 
ject specifications effectively 
with project team. Minimum of 
a Master's Degree or equiva- 
lent in Computer Science, CIS, 
Engineering, Mathematics, El- 
ectronics, Business, Manage- 
ment, Technology or a related 
field required; position also 
requires extended travel and/or 
relocation. No prior profession- 
al experience necessary. Attra- 
ctive compensation package 
Mail resumes to: American 
Solutions, Inc., Job #SE02, 100 
Commerce Drive, Suite 103, 
Newark, DE 19713 


PROGRAMMER ANALYST 
Multiple Openings 


Job located in Newark 
Delaware and various unantici- 
pated client sites throughout the 
United States. Analyze, design, 
develop, modify and implement 
software/systems applications in 
a client/ server environment; will 
also design, implement and 
maintain various programming 
and operating systems; will work 
in a team environment testing 
and developing software/sys- 
tems applications in accordance 
with project specifications; will 
also work under the close super- 
vision of the project manager 
Minimum of a Bachelor's De- 
gree or equivalent in Computer 
Science, CIS, Engineering 
Mathematics, Electronics, Bus- 
iness, Management, Technology 
or a related field required; posi- 
tion also requires extended trav- 
el and/or relocation. No prior 
professional experience neces- 
sary. Attractive compensation 
package. Mail resumes to 
American Solutions, Inc., Job 
#PA01, 100 Commerce Drive 
Suite 103, Newark, DE 19713 


Luceo, Inc. seeks Programmer 
based out of our Naperville IL 
loc. Design, code, test, imple- 
ment, & maintain new/revised 
object oriented software applica- 
tions. Use JAVA/J2EE, JDK 
JSP, Struts Framework, JDBC 
HTML, Web Service, SOAP, 
UDDI, JAX-RPC, MQ Series 
JMS, Jskd1.4, EJB1.2, WSDL 
Web logic server 8.1, Web Logic 
workshop, XML, SAX, JSTL 
JAXP, JAXR, JAXB, SAAJ 
Dream Viewer, ERWIN, Rational 
Rose and other related software 
programming languages, and 
operating systems, as needed. 
Some travel required. Must have 
Masters in Engineering, 
Computer Science, or related + 
2 years relevant experience. 
Resume to Luceo, Inc., 1431 
Kallien Avenue, Naperville, IL 
60540 
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IT Careers: U.S. Cellular Focus on Customers Results in Innovation 


t wasn't so long ago that the standard strategy for 

wireless or telco companies was fish or be bait. 
Throughout this wave of massive consolidation, 
however, U.S. Cellular has maintained that it wants 
to be mid-pack, preserving its place as a super- 
regional wireless company that wins — and keeps — 
business through service. 


Formed in 1983, U.S. Cellular’s strategy is based on 
providing superior service to its customers. With 5.1 
million customers in 25 states, the 
company has an all-in churn rate of 1.7% - 

- among the best in the industry. Leaders 

and associates work to keep customers, as 

well as to gain converts, through 
innovation and technology. 


In 2002, U.S. Cellular rolled out its 
easyedge™ product, allowing customers to 
download applications ranging from sports 
scores and stock quotes to games and 
ringtones. In 2004, it introduced CDMA-1X 
— code division multiple access digital — 
and built 840 new call towers. Another U.S. 
Cellular innovation, Traffic Map, provides 
real-time traffic speeds and times to 
destinations in select markets. 


Happy to be neither fish nor bait, U.S. 
Cellular’s business strategy is to remain 
independent. The wireless communications 
company is hiring for both engineering and 
information services, which combined have 
more than 1,100 of the company's 7,400 
associates. The engineering organization 
supports every technology that serves its 
customers. IS, on the other hand, supports 
the enterprise — every software and hardware 
requirement needed to operate the business. 


“Our business focus has been and will be to focus on 
understanding customer needs and expectations and 
delivering products and services to meet those,” 
explains Mike Irizarry, executive vice president of 
engineering and chief technology officer. “If we do, 
we'll hang on to current customers and create a 
reputation such that we garner new customers.” 


The strategy seems to be working as U.S. Cellular 
added more than 600,000 new customers in 2004, 
contributing to revenue growth of 19%. Irizarry and 
his team oversee wireless towers, network build- 
outs for new markets, network operations and 
technological developments. On the heels of the 
CDMA rollout last year, the team currently is 
launching U.S. Cellular into the St. Louis market, a 
major undertaking that will represent U.S. Cellular’s 
second largest market behind the headquarters 
location in Chicago. 


His partner in technology is Karen Kirwan, executive 
vice president of information services and chief 
information officer. Her team manages the internal 
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and external technology resources, including offices, 
kiosks, retail stores and call centers. They ensure the 
company’s technology, software and hardware 
systems operate without interruption and in the past 
two years have rolled out a new billing environment, 
implemented technology to support wireless number 
portability and launched easyedge™, the wireless 
data service. 


http://www.uscellular.com 


managers, project managers and business analysts. 
“! also need people who can evaluate, select, 
configure and implement existing applications,” she 


Together, they and the other U.S. Cellular leaders 
focus on removing any obstacles associates may 
face in terms of meeting the needs of customers — in 
terms of technology, but also in terms of the work 
environment, the business processes and the tools 
needed. “We want customers to know that when 
you hit send, U.S. Cellular will work whenever and 
wherever,” Irizarry adds. 


He views the company as being a fast-follower in 
technology. “We don’t believe we can serve our 
customers best by being first to market, before we've 
resolved the issues that come with any new 
technology,” Irizarry says. 


“The challenge now is the ability to bring full multi- 
media services to the mobile device, and that's going 
to continue to be an exciting space,” he says. To 
enable the technology expansion, he plans to hire at 
both the corporate headquarters in Chicago and in 
the field. The positions range from RF engineers and 
cell technicians to directors. 


However, Irizarry stresses that the technical skills 
aren't as important as attitude. "We need people 
who have the attitude of serving customers and who 


Computerworld - June 13, 2005 


will synch up with our values of respecting one 
another, one team/one goal, and valuing diversity in 
all its different aspects.” The company refers to its 
culture as the Dynamic Organization, based on 
customer focus, pride, diversity, empowerment, 
ethics and respect. Associates like the concept, 
rewarding the culture with a 96% approval rating. 


Kirwan's team mirrors the external technical 

expertise, internally. “That makes for easy 
movement,” she says, pointing to a career 
advantage. Kirwan is specific about her 
hiring requirements and the competencies 
needed for U.S. Cellular to move forward. 
In addition to designing the systems and 
architecture supporting U.S. Cellular’s 
growing organization, the group will 
continue to focus on setting up operations 
for new markets, and will push the product 
launch of the company’s integrated 
wireless phone to provide email and other 
functions. 


This year brings the launch of Press to Talk, 
a walkie-talkie like ability that combines 
the rugged communication environment 
needed for construction and other 
businesses with the hand-held phone. From 
an enterprise-system stance, the group is 
developing a knowledge-based customer 
value system that will align customer 
preferences with how  call-center 
Operators, sales associates and others 
interact with each person. 


To address these projects, Kirwan needs 
database analysts, business intelligence 


says. Performance analysts look at system 
performance and optimization, tweaking them to 
improve end-to-end processing. The telephony 
segment of her group continues to develop new 
capabilities to provide interactive and integrated 
voice response systems. And the high-end of the 
career path, systems integrators, remain in high 
demand. “They look across all of our platforms and 
products to create adaptability,” Kirwan explains. 


The intensity of both the IS and engineering groups 
is evident, in the number of projects on the slate as 
well as the push to adapt to new technologies. “We 
focus on getting things done, but also on how we 
get things done,” Irizarry says. “Are people having 
fun? Does the group have high morale? That's 
important if we are to have the highest customer 
satisfaction.” 


For more information about IT Careers advertising, 
please call: 800.762.2977 
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Continued from page 1 
Records 


through a new private-public 
collaboration called the Amer- 
ican Health Information Com- 
munity (AHIC). 

The 17-member AHIC team 
will recommend solutions to 
the HHS for ensuring that 
electronic medical records are 
interoperable while protecting 
the privacy and security of pa- 
tient data. 

Users listed several hurdles 
facing any effort to create 
such standards, including a 
growing list of diverse EMR 
products, the need for strong 
security and the variety of IT 
processes used by health care 
operations. 

For example, at Susquehan- 
na Health System in Williams- 
port, Pa., only 40 of the 200 
physicians use the same EMR 
software as the three hospitals 
in the system. The others use 
technology from other ven- 
dors, said Angela Haas, chief 
medical information officer at 
the health care provider. 

“If my electronic health 
record can’t talk to the one 40 
miles away, yet patients are go- 
ing back and forth [between 
offices], we are defeating the 
purpose of an EMR,” Haas said. 


Committee Tasks 


The AHIC will have 
five specific tasks. It will: 


RECOMMEND options for pro- 
tecting privacy and security. 
IDENTIFY health IT projects that 
will provide immediate benefits to 
consumers, such as systems to 
ensure drug safety and monitor 
for bioterrorist attacks. 


RECOMMEND a nationwide 
Internet-based architecture to 
share health information. 


SUGGEST private-sector stan- 
dards-setting processes. 


OUTLINE how AHIC can be suc- 
ceeded by a private-sector health 
information community. 





Sato said his biggest fear is 
that any new standard will fa- 
vor the products of one ven- 
dor over those of another, po- 
tentially hampering hospitals 
like his that have already se- 
lected EMR tools. 

Salem this summer will be- 


| gin deploying an EMR system 


from Epic Systems Corp. in 
Madison, Wis. 


Privacy Concerns 

David House, vice president of 
information services and CIO 
at Baptist Health, which oper- 
ates five hospitals in Arkansas, 
said that the standard for in- 
teroperability will need to in- 


NEWS 


clude a secure format for a pa- 
tient identifier for organiza- 
tions that share health records 
— one that’s similar to the 
routing numbers used by 
banks and other financial ser- 


| vices organizations. 


“If they could give me the 


| format of the number, I could 

| start developing systems 

| around that,” House said. “But 
| the minute I assign you a num- 


ber, there are all kinds of pri- 


| vacy concerns.” 


In addition, the commission 
will have to devise a system 


| for handling the disparate 


ways health care organizations 
electronically define common 





tests and other procedures, 
said John Crooks, IS program | 
manager at the Mayo Clinic in 
Rochester, Minn. 

“The definitions of those 
data elements are more diffi- 
cult than the transmission of 
data,” Crooks said. He noted 
that such standards are neces- 
sary to be able to quickly iden- 
tify national disease out- 
breaks, such as one resulting 


| from a terrorist attack. 


John Quinn, chief technolo- 
gy officer at New York-based 
Capgemini U.S. LLC’s health 
care practice, agreed that 
standardizing such processes 
will be a major challenge 


Grand Jury Knocks Santa Clara Health Care IT Effort 


THE SANTA CLARA VALLEY 
Health and Hospital System 
(SCVHHS) has taken a haphaz- 
ard approach to the planning and 
deployment of electronic medical 
record (EMR) technology, ac- 
cording to a recently released 
civil grand jury report. 

Because of that slap-dash ap- 
proach, the report said, the 
agency has initiated multiple dis- 
parate efforts with no considera- 
tion of integration issues. 

The grand jury - which acts as 
a “civil watchdog” for California 
counties and cities - launched 
the investigation after hearing in- 
consistent statements about the 
status of EMR systems during vis- 
its to the SCVHHS and the coun- 
ty’s Department of Correction. 

The report, released at the end 
of last month, contended that 
county health officials, lacking a 
strategic plan, have taken “the 
most inefficient, costly and fail- 
ure-prone approach possible” to 
building an integrated electronic 
health record system for the 524- 
bed Santa Clara Valley Medical 
Center, eight clinics and a pro- 
gram to provide health services 
to county jail inmates. 

County officials, meanwhile, 
maintained that the grand jury in- 
vestigation was incomplete and 
didn't consider key information. 


Kim Roberts, chief financial 
officer of the county health sys- 
tem, said parts of the grand jury 
report are “factually inaccurate” 
and argued that most of the 
grand jury's concerns center on 
the county's health care services 
for jail inmates. 

Those services are a small 
part of SCVHHS services and 
just reverted back under its um- 
brella in January after two years 
under countywide IT control, 
Roberts said. 

As for the grand jury's criti- 
cism that it lags behind other 
health agencies in EMR efforts, 
she said, “We're not a leader of 
the pack - county hospitals don’t 
have the wherewithal to do that. 
We have a tremendous amount 
of electronic capability. We 
haven't been sleeping.” 

The report charged that sever- 
al SCVHHS efforts to roll out par- 


tial EMR systems were undertak- 
en without the knowledge of key 
county health managers. 

The report also criticized a 
nine-year, $34 million contract 
awarded in 1998 to Siemens 
Medical Solutions to integrate in- 
formation for all health care 
providers, administrators and 
regulatory agencies. The contract 
also required that Siemens build 
a system that provides a com- 
plete view of patient health care 
information. 

That effort is “inconsistent 
with definitions, policies and 
practices” that are typical of oth- 
er local and regional health care 
providers, the report said. 

Roberts defended the 
Siemens contract, saying that 
it resulted in automating the 
SCVHHS billing processes. 

Siemens also built applica- 
tions for other core functions, in- 


That the Santa Clara County Board of Supervisors form a 
ea eH ROMMEL MEMO leer CcMm ILL aie mit aCe) 
interoperable electronic medical record system. 


That the task force inventory current EMR activities and 
identify existing work that merits preservation and integration 


into longer-range plans. 


That the task force and the health service CIO revisit current 


aes m eum 
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| facing the AHIC team. 


“We have a tremendous 


problem in lack of standards 
| for processes,” Quinn said. “It 


is not like a simple EDI stan- 
dard that says this is how we 
communicate a purchase or- 


| der. We have to get more to- 


ward plug and play.” 
In a related move, HHS last 


| week also released four re- 


quests for proposals for con- 


| tracts to create processes for 
| data standards, product certi- 


fication, privacy and security, 


| and the architecture for an In- 
| ternet-based nationwide 


health information exchange. 


| @ 54959 


cluding patient management, 
registration and billing, she said. 

The report did note that, de- 
spite the difficulties, the medical 
center has made “considerable 
progress” toward deploying an 
EMR system, but it still faces 
some technical problems, includ- 
ing delays in responses to re- 
quests for clinical information. 

The report recommendec that 
the county develop a task force 
to plan for and deploy an interop- 
erable EMR system and revisit 
current design plans. 

“This is obviously not a simple 
problem to solve, [and] there 
have been many failures in the 
[health care] marketplace,” said 
Dennis Kotecki, the health and 
hospital system's CIO, in criticiz- 
ing the report. “None of that was 
addressed.” 

Scott Tiazkun, an analyst at 
market research company IDC, 
agreed that such projects are dif- 
ficult, saying that highly publi- 
cized problems with past EMR 
systems have left some health 
care organizations hesitant to 
adopt the technology. 

“People have spent a lot of 
money, [but] the employees were 
not properly trained, the inter- 
faces were not intuitive - they 
didn’t get any return because the 
users were not using it,” said 
Tiazkun. 

- Heather Havenstein 
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FRANK HAYES # FRANKLY SPEAKING 


Invisible Encryption 


HY DIDN’T THIS HAPPEN SOONER? Seagate 
Technology has just announced a hard disk drive 
for laptops and other mobile devices that auto- 
matically encrypts all data as it goes into and 
comes out of the drive. Result: Nothing on the 
drive is accessible unless you know the password. If you lose your 


Look, Just Don’t Touch It, OK? 
The big red button on the wall in this data center is 
clearly labeled “emergency shutdown.” But coming 
| out of the top of the mounting box is an 8-in. piece of 
steel conduit with three unconnected wires sticking 
| __ out. “One worker wondered why the button was stil 
here if it wasn’t connected,” reports a pilot fish on 
the scene. “He figured, ‘It can't still work, can it? 
Let's see.’ He shut down the entire state government 
network at 10 a.m. on payroll processing day with 
eo 

what?’ I print- 


laptop with a drive like this installed, that’s all you lose. The data is 
safe from prying eyes — a thief can’t even boot it up. 
Sure, the FBI, CIA or NSA can probably still get at your data. But 
the bad guys you’re most worried about won’t have a chance. 
Actually, that probably explains why this hasn’t happened sooner. 
That automatic encryption could get mighty inconvenient. 


For example, when users forget their pass- 
words, they don’t want to have to rebuild the 
contents of their hard drives from scratch. They 
want to tell IT, which resets the passwords so 
everybody can just go back to work. 

And when things get munged on an execu- 
tive’s hard drive and all his un-backed-up pre- 
sentations, reports and notes appear lost, he 
doesn’t want his drive reimaged. He wants IT to 
use specialized tools to poke around on the disk 
and reassemble those deleted files. 

That likely won’t work with Seagate's “full 
disc encryption” drives. They’re designed to be 
black boxes that work independently of operat- 
ing systems. You put the data in and get the 
data out through a tightly defined interface. But 
you don’t get a lot of room for poking around. 

So when seamless hard-drive encryption 
finally gets here (by next spring, according to 
Seagate), our tools and tricks for dealing with 
hard-drive hiccups won’t work. We’ll hear 
screams the first time things go wrong. Then 
we'll hear demands that the encryption be 
turned off, or that the drives be re- 
placed with conventional hard disks 
that make data recovery easier. 

We'll need to be prepared for 
those screams and demands. We'll 
have to explain the business case for 
seamless encryption (better securi- 
ty, reduced liability risk, less expo- 
sure to data-protection laws). We'll 





Law 


But as unpleasant as this transition is likely to 
be, we need it. Data just keeps getting harder to 
control. We can’t seem to stop users from copy- 
ing it onto laptops and then losing them. We try 
to block industrial spies and crackers, worm 
writers and key loggers, but too often they get 
through. Meanwhile, between the Sarbanes- 
Oxley Act and privacy laws, the stakes keep 
getting higher. 

We’ve got to protect that data, and it’s clear 
the answer is encryption. 

It’s also clear that we won’t successfully add 
encryption ourselves. We can’t make it transpar- 


ent enough. If users have to do anything special, 


they won't. So even if we provide it, encryption 
won't get used — unless it’s invisible. 

And unless it’s built into the hardware, where 
no one can tinker with it, tweak it or turn it off. 

Users won't like the fact that we can’t do 
those things. Many of us won't, either. We like 
having that fine control for fixing problems at a 
low level. Tinkering is in our DNA. 

But we can’t afford that anymore — not if the 
price is security. Besides, if we’re 
really going to serve our organiza- 
tions’ business needs, that’s the 
wrong level to be working at any- 
way. We need encryption to be 
built in, not bolted on. And not just 
built into laptop hard drives, but 
networks and file servers and tape 
backup systems, too. 


ee: 
desk to com- 
plain that her 


SHARK 
TANK. 


ed the report to 
a file and sent 
him the file.” 


computer started mak- : He WILL Find 
: Something 


ing aloud beeping noise : 
soon after it was turned: 
on. “I asked the user to 
turn the computer off, 
which she did,” says 
help desk pilot fish. “But : 
she complained that the 
computer was still mak- 
ing the loud noise. She 
was so distressed that | 
decided to walk over to 
her building to assist 
her. But when | got to 
her office, she wasn't 
there. In fact, the entire 
building was deserted. 


was the fire alarm.” 


Never Mind 

State government pilot 
fish sometimes sends 
data to county agencies 
in the form of Microsoft 
Access database files on 
CD. Then counties start 
upgrading to PCs with- 


fish starts getting com- 
plaints. “The easy fix is 


their county computers 
that still has Access on 
it,” fish says. “However, 
I knew | was in trouble 
when | asked one caller 


puters had Access and 


" Pilot fish at this oil refin- 


{ : ery is busy doing a soft- 

? ware instaliation in the 

: server room when the 
safety inspector arrives. 

But fish isn't worried: 

i _ Everything's buttoned 


? down, and the inspector 
: doesn't find any safety 
: violations. Finally, in- 


: spector turns to fish and 
? you're working on this 

: equipment, a hard hat 

: should be worn.” 

The loud noise she heard : 

; Support pilot fish gets a 
? call from a user with PC 
: user’s description, fish 
? bles. He grabs some 

: Spare memory so that 

: when he gets to the 

: user’s desk, he’s ready 
: was in the process of 
: disconnecting the CPU 
to tell them to use one of : 
: keyboard so | could open 
: it,” fish reports. “The 

: ‘Since you're working on 
: that part, why don’t you 
if any ef their other com- : 
; me so | can continue 


to test it on the spot. “I 


from the monitor and 


connect the monitor for 


That way, we can stop thinking 
about encryption and concentrate 
on how IT can make the business 
better, not just safer. 

And that can’t happen soon 
enough. @ 54920 


want to be ready with easier ways 
of doing backup, along with a well- 
designed way to file away copies of 
those hardware passwords. 

Stocking up on asbestos earplugs 
might be a good idea too. 


CONNECT WITH THE SHARK. Send your true tale 

of IT life to me at sharky@computerworld.com. 
You'll get a stylish Shark shirt if | use it. And check out the 
daily feed, browse the Sharkives and sign up for Shark Tank 
home delivery at computerworld.com/sharky. 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerwortd.com. 
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business to Avis. 


Cingular helped 

Avis take a premier 

service nationwide. 

By implementing a 

customized appli- 

cation to run on the 

ALLOVER “ network, 

Cingular gave Avis 

broader nationwide 

coverage. Now 

more Avis customers can bypass the rental counter and 
check in right from the Avis shuttle. More satisfied 
customers puts Avis on an even greater road to success. 
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